Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For the sake of easy use, I let the application to store my passwords. Several important passwords related to my hosting accounts are stored in Opera, Putty and Filezilla. I guess this might be an important security hole, isn't it? How easy is it to recover a password from these applications?

share|improve this question
up vote 4 down vote accepted

It's fairly easy - any reasonably competent computer user could probably do it.

Of course, that is only a security risk if you assume that someone can read the files on your hard drive. And if it's a virus/trojan doing this, it could already be logging your keystrokes anyway. So I'd say, if you enter passwords on a computer, it's generally ok to store them as well, unless it's a shared system without user-level security.

BTW, many apps allow encrypting the password store (Firefox e.g. does). That should be secure (unless a keylogger is installed, see above).

share|improve this answer

Here are some of the ways to retrieve password data in some of the most used web browsers:

I'm running Firefox 34.0.5. On this browser, to view your stored passwords, just go to Menu button -> Options -> Security -> Saved Passwords... -> Show Passwords. I'm also running Chrome 39.0.2171.71 m. On this browser, type chrome://settings/passwords in the URL, click on any sequence of stars appearing as a password, click Show, and enter your Windows password to display the password. For Internet Explorer, go to Settings -> Internet Options -> Content -> Autocomplete -> Settings -> Manage Passwords (this button is, however, missing on my desktop version of Internet Explorer 11.0.9600.17358CO), which brings you to Control Panel -> All Control Panel Items -> Credential Manager -> Web Credentials -> Web Passwords -> entry -> Password: ****** Show. On Opera one can access password information by clicking on Application Menu -> Settings -> Privacy & security -> Passwords -> Manage saved passwords -> click on any sequence of stars appearing as a password, click Show, and enter your Windows password to display the password.

Interestingly enough, after installing Firefox and Chrome and storing web passwords with both browsers, I installed Opera. The Opera browser was able to import all web password credentials from Firefox but not from Chrome.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .