Why auto-fill passwords are so dangerous

In 2015, the average Internet user had 90 Online accounts, a number that has undoubtedly grown since then. This has forced users to create dozens of passwords, sometimes because they want to practice healthy security habits and other times because the platforms they’re using have different password requirements.

Web browsers and password manager applications addressed this account overload by allowing usernames and passwords to be automatically entered into a web form, eliminating the need for users to hunt down the right credentials before logging in.

Unfortunately, the process of tricking a browser or password manager into giving up this saved information is incredibly simple.  All it takes is an invisible form placed on a compromised Web page to collect users’ login information without them knowing.

Using auto-fill to track users

Stealing passwords with this strategy has been a tug-of-war between hackers and security professionals for over a decade. However, it has recently come to light that digital marketers are also using this tactic to track users.

Two groups, AdThink and OnAudience, have been placing these invisible login forms on websites as a way to track which sites users visit.  These marketers made no attempts to steal passwords, but security professionals said it wouldn’t have been hard to accomplish.  AdThink and OnAudience simply tracked people based on the usernames in hidden auto-fill forms and sold that information to advertisers.  This is scary stuff…a hidden form, which you can’t see, requesting auto-fill information from your browser, which your browser will provide without your knowledge or consent.

One security tip for today

Turn off auto-fill in your Web browser.  It’s quick, easy, and will go to great lengths to improve your account security.

• If you use Chrome – Open the Settings window, click Advanced, and select the appropriate settings under Passwords and Forms.
• If you use Firefox – Open the Options window, click Privacy, and under the History heading select “Firefox will: Use custom settings for history.” In the new window, disable “Remember search and form history.”
• If you use Safari – Open the Preferences window, select the Auto-fill tab, and turn off all the features related to usernames and passwords.

This is just one small thing you can do to keep your accounts and the information they contain safe.  For managed, 24×7 Cybersecurity assistance that goes far beyond protecting your privacy, call us today.

The post Saving Passwords in your Browser? appeared first on Runwell Solutions, Inc..

Runwell Solutions® cybersecurity services keep your business one step ahead of resourceful criminals. We are introducing an additional layer of protection to the SkyShield Cybersecurity solution in the form of Cybersecurity Awareness Training.  Cybersecurity Awareness Training will empower your staff to identify and understand spam, phishing, spear-phishing, malware, ransomware, and social engineering.  With this training, your business can establish a human firewall to effectively block hackers and criminals, and keep you protected.

Using SkyShield Cybersecurity Awareness Training, we can test your employees with simulated, randomized phishing attacks and provide ongoing training with interactive modules, videos, games and newsletters.  We can also provide you with reports which demonstrate the results of phishing tests and training progress.  SkyShield Cybersecurity Awareness Training will keep employees on their toes and security at the forefront.

If you’re interested in learning more about Cybersecurity Awareness Training and especially if you’re not using SkyShield to protect your business, please call us today.

The post Securing the Human appeared first on Runwell Solutions, Inc..