Re:Save password on chrome? Think again chrome://chrome/sett...
by itp on Monday December 03, 2012 @07:31AM
(#4865078)
Not intended to excuse Chrome here in any way, but I've had no problem using KeePass for my passwords. I use a Chrome extension to let KeePass entries auto-populate in the browser, and my database locks itself after only a few minutes of inactivity (or I can explicitly lock it).
Re:Save password on chrome? Think again chrome://chrome/sett...
by PeterisP on Monday December 03, 2012 @07:46AM
(#4865138)
If you want to store them encrypted, then chrome has to ask your master password every time you want to actually use the stored passwords (i.e., open a random website).
If you don't store them encrypted - then your passwords (as well as everythin else) are available to any random person who has access to your computer for 3 minutes, and not showing them directly is just a minor inconvenience.
Actually, the solution is simple - don't have random persons access your computer for 3 minutes; always locking your screen when leaving is the simple and effective way to counter this risk and many others.
Re:Save password on chrome? Think again chrome://chrome/sett...
by michh on Monday December 03, 2012 @07:32AM
(#4865083)
A random person with access to your computer could easily install a keylogger in those 3 minutes.
Re:Save password on chrome? Think again chrome://chrome/sett...
by runarb on Monday December 03, 2012 @07:55AM
(#4865164)
True, but that requires much more technical know-how.
For one you need to have a keylogger available when the victim is away from the computer. The keylogger may also be detected by a virus killer, now or it he further. The key logger most also send the passwords somewhere, leaving a forensic trace (or the culprit must get access to the computer again to retrieve the passwords).
The chrome "hack" on the other hand can easily be done if you have the opportunity and require no technical know-how or preparations. It also leaves no trace.
I know they wouldn't really be safe even if encrypted, but I just want them not to be available to any random person that has access to my computer for 3 minutes...