Passwords in a Browser...SBIE?

[gizmo77]

My browser can be set to offer saving passwords. I suppose all of 'em do. For a long time I have kept my log-in passwords [for important URLs] in a TrueCrypt file. I decrypt them for log-on, when I need them. I do not let OPERA save them.

From my understanding of how Sandboxie works, i.e. copying requisite browser files into the Sandboxie folder and executing the 'copy', it seems to me that if I take OPERA's offer to 'save' my log-on passwords, every time I use the browser, for ANYTHING, my password cache would be available to an intruder. Granted, by running Drop Rights, the intruder SHOULD be prevented from running in the Sandbox and actually extracting them for Evil Purposes.

So...what do you Wise Ones think about it ??

Giz

[gizmo77]

Well, OK. I guess I'll just keep playing it safe. Not too inconvenient as access to passworded URLs is NOT a daily thing....

Giz

[bo.elam]

Hi Giz, I don't use programs for saving passwords or save them in the browser. I feel safer that way. Thats really all I can tell you about passwords.

Bo

[Craig@Invincea]

I use LastPass in my browsers. And it works flawlessly in SBIE and w/ Opera. Passwords, Profile and even encrypted credit card data w/ the 2FA security layer (in a SB)

I also let Google Chrome (Google in general) sync my passwords...I also use encrypted w/ Google Wallet as well.

The 2FA add on is the Yubikey 2FA Authentication....available in the premium LP account.

[gizmo77]

Thanks Guys..... Yeah, the contents of my 'Important Passwords' TrueCrypt file only contains five 'business' P/Ws... No need to get too wild about it...

Take Care

Giz