Posted on Friday March 20, 2020Many people use auto-fill passwords for their convenience. What you might not know is that hackers and advertisers can use them to get access to websites and other applications and gather sensitive information. Learn more about the risks of using autocomplete passwords.
Certain web browsers have integrated features that enable usernames and passwords to be automatically entered into a web form. There are also password manager applications that have made it easy to access login credentials. But these aren't completely safe. They can become a liability if hackers gain access to computers or browsers.
For example, if a hacker gains access to just one account, it'll be easier for them to obtain access to other accounts because the autocomplete feature will fill in all other saved credentials.
Tricking a browser or password manager into giving up saved information is incredibly simple. All a hacker needs to do is place an invisible form on a compromised webpage to collect users' login information.
For over a decade, there's been a password security tug-of-war between hackers and cybersecurity professionals. Little do users know that shrewd digital marketers also use password auto-fill to track user activity.
Digital marketing groups AdThink and OnAudience have been placing these invisible login forms on websites to monitor the sites that users visit. AdThink and OnAudience track people based on the usernames in hidden auto-fill forms and sell the information they gather to advertisers. While the intention is not to steal passwords, there's always the likelihood of exposure.
A quick and effective way to improve your account security is to turn off auto-fill in your web browser. Here's how to do it: