#Password depot chrome extension password
Luckily for us, with a local password manager it shouldn’t be hard to find. The company assured that they take these very seriously but, to my knowledge, didn’t manage to address any of them so far.įirst let’s have a look at the data. Note: The flaws discussed here have been reported to the company in February this year. So I spent 30 minutes looking into it and noticed that they’ve done pretty much everything wrong that they could. What’s so special about Password Depot? Absolutely nothing, except for the fact that one of their users asked me for a favor. Our guinea pig is a password manager called Password Depot, produced by the German company AceBit GmbH. Some technical understanding is required, but hopefully you will be able to apply the tricks shown here, particularly if you plan to write about a password manager. That’s a password manager where all data is stored on your computer rather than being uploaded to some server, a rather convenient feature if you want to take a quick look. So I want to go with you through some basic flaws which you might encounter in a local password manager. And I also work on competition, a password manager called PfP: Pain-free Passwords which I develop as a hobby. Actually, I’m not quite an expert, I merely know more than most. The trouble: these experts usually work for competing products and badmouthing competition would make a bad impression. Judging security of a password manager is a very complex task, something that only experts in the field are capable of.
#Password depot chrome extension install
Or worse yet, they will fire up a debugger to check whether they can see any passwords in memory, completely disregarding the fact that somebody with debug rights can also install a simple key logger (meaning: game over for any password manager). They will talk about two-factor authentication support, even when discussing a local password manager where it is of very limited use.
In fact, even tech publications struggle with this. Unfortunately, it’s really hard to see security or lack thereof. How do you know whether you can trust the application with data as sensitive as your passwords? Actually, almost all of them, with one factor suspiciously absent: security. And there are lots of reviews, weighing in features, usability and all other relevant factors to help you make an informed decision. If you want to use a password manager (as you probably should), there are literally hundreds of them to choose from.
0 kommentar(er)
