Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've a dozen email accounts, probably a hundred websites and forum accounts and I don't want to go about changing all the passwords.

Do I need to change the password of websites that I seldom logon - or the logon is "saved" in the browser cookie?

share|improve this question
If you haven't recently logged onto a site, your password is very unlikely to be in its memory. However, the exploit has existed for a few years and we will never know if someone was using it in that time before it was publicly announced. Should you reset passwords? It depends where you are on a scale of paranoid to lazy. – user20574 Apr 12 '14 at 13:24
If every single on of those accounts has a unique password. You can ignore the websites you have not visited in 2 years. – Ramhound Apr 12 '14 at 21:39
up vote 2 down vote accepted

Ultimately its your call, however yes, you should change all your passwords ONCE YOU KNOW THE PROVIDER HAS UPGRADED THEIR AFFECTED SYSTEMS (or if you know they are not affected but have used the same password in multiple locations).

Unfortunately Heartbleed allows a bad player to get unencrypted usernames and passwords which are in memory on a compromised system. Having the passwords stored in your browser (but not used) is probably not an issue though.

Although this vulnerability has only been common knowledge for days, it is possible that the system has been compromised by sophisticated players (think NSA) for up to 2 years - so another component to the question is "how worried are you about government agencies being able to continue to access your details through these systems".

I grant you that what I am saying is probably paranoid. Unfortunately Edward Snowden has shown they are actually watching us !!

share|improve this answer

Two things to consider on those sites: does the site have your credit card information or other important data stored? If so, be cautious and change it. If you have used that same username and password on other sites where you have important data, you would also want to change it.

share|improve this answer
If a website is using actually storing your credit card information then you are already in trouble since they are not suppose to do that. – Ramhound Apr 12 '14 at 21:38

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .