Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 6 down vote favorite
1

I have a really long random password for my cellphone account and have it written down in a safe place. I only use it once a month and am considering having my browser remember it. Would there be any disadvantages to this? My computer is password protected so I don't see the threat.

Something I want to point out: the longer a password is the more likely a person is to make a mistake typing it in.

share|improve this question

3 Answers

up vote 4 down vote accepted

Make sure you use a strong Master Password, and don't forget it or lose it (Because resetting your master password will remove all of your saved usernames and passwords).

Essentially doing this means you're using Firefox as a password manager. The question now is "Is Firefox a good password manager?". Here are some answers to consider.

Alternatives: Lastpass (as mentioned) is a standalone password manager. A free and open source one I use is Keepass.

share|improve this answer
up vote 2 down vote

This greatly depends on the web browser.

e.g. Firefox had some trouble with their password manager's security in the past. I don't know about other browsers though...

If you want to be browser-independent you can use a service like https://lastpass.com/ They have plugins for most browsers. They even have a on screen keyboard.

Of course you should also choose a good master password for whatever password safe you are going to use.

share|improve this answer
"Firefox had some trouble with their password manager's security in the past." in the linked discussion many people have argued that this is not a Firefox issue at all. In particular see this comment "This is not really a flaw, The password managers (both in firefox and ie7) are doing exactly what they are supposed to do, they are automatically filling in login forms. They simply fill out the fake form, it's up to the user to submit it!" – curiousguy Jul 11 '12 at 1:42
And then there's Javascript... – Tie-fighter Jul 11 '12 at 9:22
up vote 0 down vote

What Tie-fighter said but really the question is would you be satisfied with the protection. A virus can steal your password but keyloggers virus could as easily steal you typing it in (so virus may not be a consideration). Is this a laptop? Do you think anyone would steal it and copy your HD contents (as oppose to selling it for quick $$ or formating to use for themselves). I think you would be fine. No one is going to guess your password which is important.

share|improve this answer
1  
Lastpass has a virtual keyboard if you are worried about keyloggers. – Tie-fighter Jul 9 '12 at 23:04
@Tie-fighter +1. What about the master password to unlock lastpass? – acidzombie24 Jul 10 '12 at 4:04
What do you mean? – Tie-fighter Jul 10 '12 at 9:37
1  
@Tie-fighter: Before you can access your passwords within lastpass you need some kind of password to unlock it? A keylogger can log that then if its designed, take all the passwords with in the program. But i pretty much say all bets are off if you system is infective and all bets of not having it infective if someone has physical access to the HD – acidzombie24 Jul 10 '12 at 10:36
1  
Like I said, Lastpass has a on screen keyboard if you are worried about keyloggers. Of course this does not help against other types of malware (e.g. stealing cookies). lastpass.com/?sk=1 – Tie-fighter Jul 10 '12 at 10:41

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.