Security News > 2021 > July > We can't believe people use browsers to manage their passwords, says maker of password management tools

ThycoticCentrify, formed from a merger between two computer access management firms, said it surveyed about 8,000 people, and reports just under a quarter admitted they reuse passwords across multiple websites - a cybersecurity no-no because it opens you up to credential stuffing.

The use of browser-stored passwords was also called out as a potential security risk by ThycoticCentrify, with a third of respondents apparently saying they rely on their web browser to manage their passphrases.

"More than a third of employees continue to save passwords within their internet browsers on all of their personal and work devices," said Carson.

"If the employee has saved multiple passwords within the internet browser, an attacker can readily see whether they are all the same or simple variations such as one character difference."

Using a password manager, even one built into a browser, with complex, randomly generated passwords is arguably better than asking people to memorize weak or guessable ones or reuse the same credentials over and over for multiple services.

Again, ThycoticCentrify is a password and access management outfit.

News URL

https://go.theregister.com/feed/www.theregister.com/2021/07/30/infosec_risky_behaviours_study/