A gentle #CoSoSec / #SecurityHygiene reminder.

Don't let your browser save your passwords, use a full password manager.

https://www.techrepublic.com/article/why-you-should-never-allow-your-web-browser-to-save-your-passwords/

The article misses one point... if you're using chrome and signed in to google, then it *does* prompt you with a password request, however, this comes with another attack vector. If your gmail password is compromised, then your passwords are too.

(myself, my chrome passwords are all fake - a sort of honeypot)

@0x56

🤔Well fuck man, 😳you couldn't drop this shit on me next week?

Now I'm gonna worry.🙄 Cuz that's just how I roll😖😁😂😂