See if your password is on the list of shame.

There are quite a few bad ones, as well as some head-scratchers.

Published at LXer: Learn how to eliminate the hassle of typing your password for every sudo command in Linux, whether you want to run specific commands or even all of them, with this step-by-step...

Categoría: Seguridad:Contraseñas
Almacena de forma segura tu información valiosa y evita el dolor de cabeza que siempre produce perder contraseñas.

IE Asterisk Password Uncover allows you to view passwords hidden with asterisks in password fields in web pages and ActiveX controls. Comes in handy when you have forgotten your passwords. When you login into a web site with user name and password, you sometimes have the option to store the password in your computer. If you choose to save the password, in the next time that you will visit this site, the password field will be automatically filled with your password, but you won't be able to view it, because the password-box shows the password as sequence of asterisks. This freeware utility reveals the passwords stored behind the asterisks (****) in the web pages of Internet Explorer and ActiveX controls. All the mentioned features are provided with a user friendly graphical interface.

SpotPaltalk recovers Paltalk instant messenger passwords, as well as passwords for AOL, Google, Facebook, MSN, Yahoo and ICQ saved in Paltalk messenger. The passwords are automatically recovered, if they are saved on the local system and you can login with Paltalk automatically without having to manually enter the password. Paltalk versions are supported including Basic, Paltalk Scene, Premium, SuperIMPlus, Extreme, Deluxe, PalPlus and Plus. Passwords from multiple profiles can be recovered as well as passwords from the Google, Facebook, MSN, Yahoo, ICQ and AIM messengers that are stored by Paltalk. All the mentioned features are provided with a user friendly graphical interface.

SpotOutlook Password Recovery is the best tool to recover Microsoft Office Outlook passwords. The software recovers password for all versions of Outlook. SpotOutlook Password Recovery is a lightweight and very easy to use application that will help you to decrypt the passwords stored by Microsoft Office Outlook. All the mentioned features are provided with a user friendly graphical interface.

SpotChrome Password Recovery is the best tool to recover Google Chrome passwords. Google Chrome Password Recovery is a lightweight and very easy to use application that will help you to decrypt the passwords stored by Google Chrome browser. All the mentioned features are provided with a user friendly graphical interface.

Your Google Talk username and password are the same as your GMail Google Mail username and password. GTalk Password Finder is a password recovery tool which allows you to decrypt and recover password and username stored by Google Talk software. Like many other Google applications Google Talk can save your Gmail password on your local computer when Remember Password checkbox is ticked in GTalk instant messenger. Google Talk password recovery software allows to recover passwords from Google Talk messenger multiple profiles.

VPN Password Recovery enumerates, displays logins and recovers passwords for virtual private network access, provides users with information about network connection properties, such as connection names, domains, phone numbers or IP addresses.

SpotDialup enumerates, displays logins and recovers passwords for Dial-Up, Internet and virtual private network access, provides users with information about network connection properties, such as connection names, domains, phone numbers or IP addresses. When you use the "Dial-Up Networking" module for connecting to the internet or VPN networks, the operating system give you the option to store the password. Although the password is constantly stored in your computer, the operating system doesn't allow you to watch it. What happens when these passwords get forgotten or lost? How you can recover your dial-up password or a network logon password? if you forget your password, you can use the SpotDialup tool for recovering your password.

SpotIM Password Recover allows automatically find and decrypt the passwords of most popular Instant Messenger programs. The program recovers lost or forgotten passwords for ICQ, Trillian, IpSwitch Messenger, Miranda,RnQ instant messengers and Camfrog video chat, Easy Web Cam accounts. SpotIM is the best Instant Messenger password finder that instantly cracks and decrypts the passwords stored on computer. All major protocols are recognized (ICQ, AIM, MSN, Yahoo, Jabber, IRC), multiple profiles are supported. All the mentioned features are provided with a user friendly graphical interface.

Remote Password Recovery is a remote computers password auditing program and security test tool, it retrieves passwords for software products saved on local or remote network computers. The software recovers Internet Download Manager, FFFTP, FileZilla, WinProxy, FAR ftp, Easy Web Cam, Web Drive, Core FTP, Ipswitch IMail, Ipswitch Messenger, Ipswitch Messenger Server passwords. With this software you will be able to find and recover a lost or forgotten passwords, save and keep an up-to-date backup of all your software passwords in a central location. Remote Password Recovery retrieves passwords from network computers and helps network administrators to examine the security of their networks by executing an audit of saved software passwords. By exposing insecure passwords, Remote Password Recovery demonstrates how secure a network is under remote password stealth attack. Remote Password Recovery is a must have tool for network administrators and designed for corporate network password audit. You can save retrieved passwords as Tab Delimited Txt File (.txt), Excel Workbook (.xls), CSV Comma Delimited (.csv), Access Database (.mdb), Web Page (.html) or XML Data (.xml) file, Print or Copy to Clipboard.

SpotIE is Internet Explorer Password Recovery software. The program recovers passwords to web sites saved in Internet Explorer 7, 8, 9 and IE 10.

SpotWin is Windows user accounts login and password recovery software. The software allows to recover forgotten Windows multiple login accounts passwords using one of the Admin accounts. For using SpotWin you should select a user account with administrator permissions that you can log on with its password. All the mentioned features are provided with a user friendly graphical interface.

SpotMSN is a password recovery tool that is used to recover lost or forgotten passwords for your MSN messenger, Windows Live Messenger 8 and Windows Messenger accounts. SpotMSN is the best MSN password finder that instantly cracks and decrypts the MSN Messenger passwords stored on your computer. All the mentioned features are provided with a user friendly graphical interface.

SpotFTP is a FTP password recover software that offers administrators and users a comprehensive solution for recovering FTP passwords and other critical business information stored in users' computers. SpotFTP recovers FileZilla, WS_FTP, Microsoft Expression Web FTP, Far ftp client, CuteFTP, FlashFXP ftp, SecureFX ftp client, WebDrive, FTP Voyager, Deluxe FTP, FFFTP, AutoFTP, 32bit FTP, FTP Now, FTP Navigator, CoffeeCup Direct FTP and FTP Control Passwords. If you forget your passwords or need to access some passwords or confidential information stored in your computer, SpotFTP can really help you to do it. All the mentioned features are provided with a user friendly graphical interface.

PRS Password Recovery Software for MAC allows to recover passwords to popular programs. If you forget or lost your passwords, PRS Password Recovery Software for MAC can really help you to find and recover your passwords. You can save revealed passwords as Tab Delimited Txt File (.txt), CSV Comma Delimited (.csv), Web Page (.html) or XML Data (.xml) file, print or copy to clipboard.

PRS Password Recovery Software is Windows application for recovering over 40 popular programs passwords, including Google Chrome, Internet Explorer, Firefox, Opera and more. If you forget or lost your passwords, PRS Password Recovery Software can really help you to find and recover your passwords. You can save revealed passwords as Tab Delimited Txt File (.txt), CSV Comma Delimited (.csv), Excel Workbook (.xls), Access Database (.mdb), Web Page (.html) or XML Data (.xml) file, print or copy to clipboard.

Lost Password Recovery for MAC allows to retrieve and view saved passwords from Google Chrome, Edge and Opera web browsers. The program recovers website, email, social media passwords from Chrome, Edge, Opera browsers and backup all your passwords to HTML,CSV,TXT file or copy to clipboard.

LPR Lost Password Recovery allows to retrieve and view saved passwords from Google Chrome, Edge and Opera web browsers. The program recovers website, email, social media passwords from Chrome, Edge, Opera browsers and backup all your passwords to HTML,CSV,TXT file or copy to clipboard.

PROBLEM: When you log into your host, it always skips past the Login prompt and displays the Password prompt. Then you must hit return to get the Login prompt.

SOLUTION: Use the -K telnet option.
The -K option specifies no automatic login to the remote system.

Article warning: If you are paranoid about everything, you should avoid reading this article or it may ruin the Internet for you.

I started converting the Behold Forum over to bbPress. The first thing I had to do was convert all the registered users. To my horror, I discovered that my old Forum stored the passwords as plain text.

That actually was terrible for three reasons. First, if I was a dishonest guy, I could take your password, assume you used the same one at other sites you use, and login as you and do malicious things. Second, since I'm honest and don't even want to know what your password is, if there was someone working for me who had access to the database, they might be dishonest and use your password. Third, since I don't have anyone working for me, if there was a hacker out there who could get into my database, they could use your password.

So I'm not talking here about the "quality" of your password. It doesn't matter if you use a simple 3 letter password, or a complex 29 character password with lower and uppercase and numbers and special characters. If someone can find it out, it doesn't matter how well crafted it is.

WordPress and bbPress are different. They do not store the password in the database. Instead they "hash" the password using the MD5 algorithm and store that hashed value. This is not encryption which makes the password retrievable again. This is a hash which hides the password from everyone, including the owners of the database.

Now I know there have been vulnerabilities found to MD5 and WordPress and others are working to block them, but even so, hashing the password is infinitely safer than leaving it in plain text for the three reasons above.

So that got me wondering. I have about a dozen different passwords at several hundred different sites I use. I wonder how many of them are not hashed but are insecure in plain text in the databases.

In most cases, there actually is an easy way of finding out. Go to a site you've registered with and click on the "lost my password" link. If they email you back your actual password, then they are storing it in text or in some accessible way. If they instead send you a message with a new random password and say your password is reset, then they probably don't have access to it, and all they can do is give you a new one.

Unfortunately, you can't find this out until you've already registered for the site. For people paranoid about this, I guess the trick would be to use a dummy e-mail address and dummy password and register with that, do a lost password request and see what they send back. Then you can decide whether to trust them and register for real.

Credit card information could have the same problem. You can't do the same thing here, since I've never seen a "lost my credit card information" link on a site. You can follow the policy of only giving your credit card to companies you totally trust. That's why PayPal is so popular. You can buy from thousands of companies, but PayPal will be the only one with your number. But do you trust PayPal? I'd trust them more than the various kids working at the corner gas station who get my card number all the time. This is not really a worry though, because credit cards have lots of levels of security and are actually very safe. The credit card companies will protect you from credit card fraud.

But giving out passwords you use can be much worse. What if your userid and password were the same for your PayPal account? That could be very bad.

For those of you who signed up to my Behold Forum, I apologise. I didn't know about this before. I'm transferring your account and an MD5 hash of your current password to the new bbPress forum I am creating, and they'll now be safe.

Version 1.6. The new command line parameter -s (Silent - no errors or warnings) has been added.

To help protect you from criminals online, let's look at some tools that store, secure and let you manage all your passwords in one place.

The post 4 Free and Cheap Tools to Safely Manage Your Passwords appeared first on Clark Howard.

Streaming service Max will try harder to keep customers from sharing their passwords and hinted that price increases could follow.

Password leaks are increasingly common and figuring out whether the keys to your own kingdom have been exposed might be tricky – unless you know where to look

The world's worst password is still "123456"

Justin Tadlock has written a nice tutorial on how to show a password form field instead of the default text “There is no excerpt because this is a protected post“.

The post Show the password on post excerpts appeared first on WPCult.

After we changed everyone's passwords a couple of weeks ago, people were asking some questions about passwords and personal data.  Firstly, we don't hold much personal data- as people have usernames, we don't know real names. We do ask for the year and date of birth to comply with the Children's Online Privacy Protection Act (COPPA). We ask for an active email account and send a link that has to be clicked on to complete the registration. This is to make it harder for automated registration by advertisers and spammers. We also ask where you're from, where you are based now and what your first language is. There are also optional fields where people can add biographical information and interests if they wish. Unless you use your real name as a username or connect via Facebook, the data is anonymous. If an acount is deleted, this information is deleted from our records.

This is 1Password’s first deal with a major distributor, and they plan to use it to expand their reseller base globally through TD SYNNEX’s broad reach.

One of my accounts in Outlook went from “Trying to connect” to “Need Password” in the Status Bar.

However, pressing on the “Need Password” icon doesn’t bring up the dialog to enter my username and password. The dialog isn’t hidden behind Outlook either, although sometimes it looks like it opens and closes really fast again.

No dialog comes up either when clicking on the "Type Exchange Password & Connect" button nor when the Notification comes up that Outlook needs your password.

How do I get myself in a Connected state again?

In this episode, Thomas Domville shows you how to share passwords and passkeys with people you trust on iOS.

With password sharing in iOS 17, iPadOS 17, and macOS Sonoma, you can create a shared group and add your family and friends to it. Then you can choose which passwords and passkeys you want to share with them. The shared credentials will sync across all the devices in the group.

Step-by-step:

To create a shared group, go to Settings > Passwords and double-tap the Add button in the top-right corner. Double-tap "New Shared Group," name the group, and double-tap Add People. Type in the contact information of the people you want to add, then double-tap Add. Double-tap Create to continue.

You will then be prompted to select passwords you want to share with the group; double-tap the ones you want to share, then double-tap the Move button in the top-right corner. If you are not ready to share any passwords yet, double-tap "Not Now."

To edit a group, go to Settings > Passwords and double-tap the name of the group. Double-tap "Manage" to add or remove members, change the group name, or delete the group.

To accept or decline an invitation to a group, make sure your device has iOS 17 or later, iPadOS 17 or later, or macOS Sonoma or later. Go to Settings > Passwords > Group Invitations and double-tap the invitation. Double-tap Accept to join the group, or Decline to reject it.

The Denver district attorney has launched an investigation into how a spreadsheet of voting system passwords ended up on the Colorado secretary of state's website earlier this year.

"Hundreds of voting machine passwords were accidentally released but what exactly was Secretary of State Jena Griswold doing to address the security breach?" -- The Denver Post Editorial Board

What is "Email Password Time Running Out"?

We have analysed this email and found that it is a scam email designed to appear like a notification from an email service provider. This email contains a link to a phishing website designed to steal personal information. Recipients should ignore such emails and know how to recognize them.

Passwords are dying. On some services, you can start playing with the process by creating a secure password... and then forgetting it.

Going Passwordless Without Going Passwordless from Ask Leo!.
Get the Confident Computing weekly newsletter: https://newsletter.askleo.com

Defending your organization’s security is like fortifying a castle—you need to understand where attackers will strike and how they’ll try to breach your walls. And hackers are always searching for weaknesses, whether it’s a lax password policy or a forgotten backdoor. To build a stronger defense, you must think like a hacker and anticipate their moves. Read on to learn more about hackers'

Apple now has an official password manager, but importing your old passwords from other apps into Apple Passwords can be a bit of a pain.

A US standards agency has issued new guidance saying organisations shouldn’t require users to change their passwords periodically – advice that is backed up by decades of research

"The goal is to complete the password updates by this evening," government says.