A guide to the most common password attacks and how to prevent them
Posts tagged "password"
Google Chrome’s password manager is finally adding this must-have feature
The built-in password manager in Google Chrome is about to get even better as Google is preparing to add the ability to store notes alongside your passwords.
Besides storing your existing passwords, Chrome’s password manager also includes a password generator to help you create strong, unique and complex passwords for each of your online accounts.
While you can use a standalone password manager like LastPass or 1Password to store your passwords securely, Google Chrome and most other browsers now offer similar functionality. However, these paid solutions often come with extra features like secure cloud storage and password sharing in addition to letting you store notes about each of your passwords.
Now though, it appears that Chrome’s built-in password manager will be getting a big upgrade with the next major release of Google’s browser.
Adding notes to your passwords in Chrome
As reported by 9to5Google and first spotted by Leo Varela, the latest Chrome Canary release adds a new feature to Chrome’s built-in password manager that will allow you to store notes with your passwords.
Once this feature becomes generally available, you’ll see a new “Notes” field underneath the username and password fields in Chrome’s password manager. However, this option will only show up when adding a new password or when you go to edit an existing password. Varela also pointed out in his Reddit post that Google is working on adding the ability to securely send passwords to others as well.
Being able to add notes to each of your saved passwords can be quite useful for those with a lot of different online accounts. For instance, you can add a note to give context to the account, to differentiate between a work and personal account or even if you want to back up the answers to the security questions associated with a particular account.
Users running Chrome Canary can test out this feature now and Google has even added the #passwords-notes flag to make it easier to enable. As this feature is currently tied to the release of Chrome 101, it should arrive in the Stable channel around April or May but the timing of its arrival could change.
- We’ve also featured the best password manager and the best identity theft protection
Via 9to5Google
1Password Developer Tools want to make it easier to set password guidance
The business password management company 1Password has launched a new set of features called Developer Tools in order to help developers better secure and share their secrets.
With Developer Tools, developers can securely generate, manage and access secrets within their development workflows beginning with Git. 1Password's new offering also helps simplify complex processes and improves security practices to ensure data is protected without slowing down the development pipeline. At the same time, Developer Tools provides developers with secure access to the secrets they need wherever they are and on any device they happen to be using.
Chief product officer and GM of emerging solutions at 1Password, Akshay Bhargava explained in a press release how Developer Tools can make security more convenient for developers, saying:
“Developers encounter a lot of complexity when building and deploying secure software, and it can often seem like security and convenience are irreconcilable. 1Password Developer Tools aims to make their lives easier by making complex security processes more convenient, and making doing the secure thing, the easy thing.”
We’re looking at how our readers use VPNs with different devices so we can improve our content and offer better advice. This survey shouldn’t take more than 60 seconds of your time, and entrants from the UK and US will have the chance to enter a draw for a £100 Amazon gift card (or equivalent in USD). Thank you for taking part.
Managing secrets
According to 1Password's recent Hiding in Plain Sight report, a quarter of employees at IT and DevOps companies have secrets in ten or more different locations and have shared them with colleagues using email, Slack and other insecure channels. Over half (61%) of projects are also delayed due to poor secret management and one in three (36%) developers have shared secrets over insecure channels to increase their productivity.
In addition to protecting personal passwords and information, Developer Tools can enhance productivity by enabling quick generation of SSH keys, seamless access to data via a command line interface (CLI) using biometric authentication and secure secrets management in one app.
Once SSH keys have been generated with just a few clicks, 1Password for the browser will autofill public keys into popular sites including GitHub, GitLab, BitBucket and Digital Ocean. Then by using Developer Tools' built-in SSH agent, developers can push code to GitHub and authenticate other SSH workflows in a terminal by simply scanning their fingerprint.
Developers can also use the new set of features to store secrets in encrypted vaults as one of several default item types including API credential, AWS account, database, server or SSH key to help prevent breaches caused by leaked secrets.
Organizations and developers interested in storing their secrets using 1Password can check out the company's Developer Documentation portal for more information on Developer Tools.
- We’ve also featured the best identity theft protection
Bitdefender wants to take a bite out of the password manager market
Bitdefender has announced the launch of its new password manager which aims to simplify the creation and management of secure passwords across all of a user's online accounts on both desktop and mobile.
While the company is known for its antivirus software, its new Bitdefender Password Manager offering also includes a password generator to create and save unique, highly complex passwords for each online account. These passwords can then be accessed by using a single master password. Bitdefender Password Manager is also backed by strong end-to-end encryption along with simple set-up, easy installation and an intuitive user interface designed to be accessible to all.
According to the recent 2021 Bitdefender Global Report: Cybersecurity and Online Behaviors, half of the over 10,000 consumers surveyed use a single password for all of their online accounts while nearly one-third (32%) reuse just a few passwords across multiple online accounts.
Vice president of Bitdefender's consumer solutions division, Ciprian Istrate explained why the company decided to create its new password manager in a press release, saying:
“Cybercriminals rely on weak passwords to compromise accounts, steal user identities and profit from selling credentials on the dark web. Despite understanding the importance of strong passwords as a security best practice, the ease of memorizing a few passwords and reusing them everywhere outweighs increased security risk for most. We built Bitdefender Password Manager with this in mind, delivering what we believe is one of the best-in-class password protection without sacrificing user convenience.”
Bitdefender Password Manager
In addition to allowing users to store their passwords, Bitdefender Password Manager can also be used to manage and auto-fill payment data. All of this data is encrypted and decrypted locally and the account holder alone has access to the master password so that no third party has access to their financial information.
While there are mobile apps available for Android and iOS, Bitdefender has also created browser extensions for Windows and macOS that support a wide range of browsers including Chrome, Firefox and Edge with support for Safari launching soon.
If you already use another password manager like 1Password or LastPass, Bitdefender Password Manager allows you to easily import data and passwords from other platforms including browsers like Chrome and Firefox which have their own built-in password managers.
An annual subscription to Bitdefender Password Manager costs $ 29.99 per year but the company is currently offering an introductory discount where new customers can save 33 percent and pay $ 19.99 for the year or as little as $ 1.66 per month.
- We’ve also highlighted the best identity theft protection
Microsoft Edge’s half-baked password manager might now be worth a look
Microsoft is preparing to roll out a new version of the in-built password manager for its Edge web browser.
Currently under development, the new-look password management feature will allow users to add credentials to their roster manually for the first time.
At the moment, Microsoft Edge requires users to visit a website, log in and wait for a prompt from the browser. By introducing a manual option, Microsoft will minimize the friction associated with adding passwords en masse.
The ability to add account credentials manually first featured in an early-access build of Google Chrome, which is based on the same Chromium engine as Edge. Microsoft appears to have built upon this foundation to port the functionality over to its own service.
It’s unclear precisely when the feature will make its way into a full public build, but it is currently available to members of the Edge Canary channel under the Profile menu.
Microsoft Edge password manager
Microsoft first introduced password management functionality to its flagship browser in January last year, offering users a simple alternative to fully-featured services like LastPass and Dashlane, which cost in the region of $ 40/year.
The idea was to give users a cost-effective way to limit the risk of credential stuffing, brute force attacks and identity theft.
However, recent reports suggest it may still be ill-advised to store your account credentials in your web browser, as opposed to using a dedicated service.
According to security company AhnLab, info-stealing Redline malware is capable of both evading antivirus software and stealing passwords and other sensitive data from its victim’s browser.
In a recent incident, an infection resulted in the compromise of a corporate network, after VPN credentials were stolen from a remote employee’s web browser.
From a cybersecurity perspective, although storing unique passwords in Microsoft Edge is better than deploying an identical password across multiple accounts, it shouldn’t be considered the perfect solution.
- Also check out our list of the best business password managers
Via WindowsLatest
iCloud for Windows now has its own password generator
Apple has released a new version of its cloud storage service for Windows and iCloud for Windows 13 now includes a password generator among other new features.
While the iPhone maker released an update back in August that allowed Windows users to leverage its iCloud Keychain password manager app, at that time they could only access their stored passwords.
Now though with the release of the latest version of iCloud for Windows, Windows users can generate strong and unique passwords for all of their accounts regardless of whether they're currently using Apple or Microsoft's operating system.
Apple also released a Chrome iCloud extension at the beginning of this year to make it easier for its users to access their stored passwords from Google's browser or even on a Chromebook.
ProRaw and ProRes support
In addition to bringing a password generator to iCloud for Windows, Apple has also added support for its ProRaw and ProRes photo and video formats to its cloud storage service.
While the ProRaw photo format was first introduced with the launch of the iPhone 12 Pro last year, ProRes is a new video format that debuted with the launch of the iPhone 13 Pro earlier this year.
As Apple's latest pro model iPhone support both formats, adding them to iCloud for Windows makes a lot of sense as users will now be able to view and edit photos and videos shot using them on their desktop PCs.
Apple users that want to use iCloud on a Windows machine at home or work can now download iCloud for Windows 13 from the Microsoft Store.
We've also rounded up the best password manager, best password generator and best identity theft protection
Via The Verge
McDonald’s Email Blast Includes Password to Monopoly Game Database
Usernames, passwords for database sent in prize redemption emails.
Threatpost
DarkSide Pwned Colonial With Old VPN Password
Attackers accessed a VPN account that was no longer in use to freeze the company’s network in a ransomware attack whose repercussions are still vibrating.
Threatpost
10 tips for choosing the right password manager for your team
The importance of password managers and how to choose the right one for your organisation.
How to change your Houseparty password or reset it
We put together a step-by-step guide to changing or resetting your password on the Houseparty social networking app.