{"id":17485,"date":"2020-01-19T10:45:16","date_gmt":"2020-01-19T18:45:16","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2020\/01\/19\/news-11220\/"},"modified":"2020-01-19T10:45:16","modified_gmt":"2020-01-19T18:45:16","slug":"news-11220","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2020\/01\/19\/news-11220\/","title":{"rendered":"Don&#8217;t Ignore Chrome&#8217;s New Password Checkup Feature"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5e22999394f53e0008341529\/master\/pass\/chrome-browser-password-2-81774681-final.jpg\"\/><\/p>\n<p><strong>Credit to Author: David Nield| Date: Sun, 19 Jan 2020 12:00:00 +0000<\/strong><\/p>\n<p class=\"byline bylines__byline byline--author\" itemprop=\"author\" itemtype=\"http:\/\/schema.org\/Person\"><span itemprop=\"name\"><span class=\"byline__name byline--with-bg\"><a class=\"byline__name-link\" href=\"\/contributor\/david-nield\">David Niel<span class=\"link__last-letter-spacing\">d<\/span><\/a><\/span> <\/span><\/p>\n<p class=\"content-header__row content-header__dek\">It could help save you when the next big breach hits.<\/p>\n<p>If you&#x27;ve signed up for or logged into any accounts in Chrome lately, you might have noticed something new: a pop-up warning you about the security of your passwords. While another nag is the last thing you need in your life, don&#x27;t ignore this one. It can help you keep unwelcome visitors from breaking into your accounts.<\/p>\n<p>It&#x27;s fair to say <a href=\"https:\/\/www.wired.com\/2016\/05\/password-tips-experts\/\">password security remains in a poor state<\/a>. People too often use passwords that are too easy to guess or crack through brute force, or use same passwords across dozens of accounts, or don&#x27;t do enough to keep them passwords out of the hands of hackers. Or, more commonly, all of the above.<\/p>\n<p>Through Chrome and Android, Google has offered to keep track of your passwords for a while now; you can see any that it might have linked to your Google account by signing in <a class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/passwords.google.com\/&quot;}\" href=\"https:\/\/passwords.google.com\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">here<\/a>. In recent months, it&#x27;s also been offering to suggest strong passwords for new accounts, and now it&#x27;ll check your existing passwords too, which is what&#x27;s prompting those pop-ups.<\/p>\n<p>If you haven&#x27;t seen one yet but still want to get your Google-powered password audit, head <a class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/passwords.google.com\/&quot;}\" href=\"https:\/\/passwords.google.com\/\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">here<\/a> in your web browser and click <strong>Check passwords<\/strong>. It&#x27;ll let you know if it sees three problems in three categories: passwords you&#x27;ve used more than once, passwords that have appeared in data breaches leaked online, and passwords that aren&#x27;t strong enough.<\/p>\n<p>A strong password is one that&#x27;s difficult for a human or computer to guess or force. It&#x27;ll be lengthy, for a start, with characters into the double figures. It should also include combination of uppercase and lowercase letters, numbers, and special characters\u2014having a password with multiple types of character makes it more difficult to crack.<\/p>\n<p>As for duplicate passwords, they may be easier for you to remember, but it means that if a password for one account becomes compromised, <a href=\"https:\/\/www.wired.com\/story\/what-is-credential-stuffing\/\">hackers can run through numerous other accounts<\/a> of yours as well.<\/p>\n<p>Then there are the passwords that have been exposed publicly, appearing in <a href=\"https:\/\/www.wired.com\/story\/wired-guide-to-data-breaches\/\">data breaches<\/a>. If this has happened to one of your passwords, it&#x27;s likely that someone&#x27;s going to be trying to force access sooner rather than later. It&#x27;s perhaps the most serious of the problems that Google looks for, more so than duplicate or weak passwords.<\/p>\n<p>If password issues are detected, you might have a lot of fixing to do. Chrome shows a list of all the issues it&#x27;s found, split into categories, which can run into the hundreds if you&#x27;ve got a lot of accounts set up.<\/p>\n<p>To try and help out, Google provides links, where it can, to pages and apps where you can make changes to your login credentials. You can even use Chrome&#x27;s password suggestions, if you want; you won&#x27;t have to remember these weird combinations of characters, because Google remembers them for you.<\/p>\n<p>If you&#x27;re don&#x27;t see password suggestions in Chrome when you create new accounts or try to change your passwords, make sure you&#x27;re running the latest version. Pick <strong>Help<\/strong> and <strong>About Google Chrome<\/strong> from the menu. You&#x27;ll also need sync turned on, so the passwords are saved to your Google account; you can do this via the top option on the main Chrome Settings page.<\/p>\n<p>With that done, suggestions should appear automatically next to fields prompting you for a password: just click <strong>Use suggested password<\/strong> to take Chrome&#x27;s recommendation, and then confirm you want the password saved, if a prompt appears.<\/p>\n<p>Safari on macOS does this too, by the way: It automatically offers to save usernames and passwords for you, and you can see the list that it&#x27;s amassed by choosing <strong>Safari<\/strong> then <strong>Preferences<\/strong> and <strong>Passwords<\/strong>.<\/p>\n<p>If you see a yellow exclamation marks next to any on the list, that means Safari thinks the password is too weak, or it&#x27;s a duplicate password you&#x27;re using for another account. (For now, Safari doesn&#x27;t check your passwords against data breaches.) To change a password, click the link Safari gives you when you hover over the exclamation mark.<\/p>\n<p>Like Chrome, Safari suggests strong passwords when you&#x27;re signing up for a new account. Click the little key icon that appears on the right of the new password field, then choose <strong>Suggest New Password<\/strong>. As with Chrome, it will save the password for you.<\/p>\n<p>Browser-based password management has <a href=\"https:\/\/www.wired.com\/2016\/08\/browser-password-manager-probably-isnt-enough\/\">improved in important ways<\/a> over the last few years. And whatever drawbacks they still have arguably outweighed by the convenience that may encourage you to finally clear up your password hygiene.<\/p>\n<p class=\"byline content-card-embed__byline-authors\" itemprop=\"author\" itemtype=\"http:\/\/schema.org\/Person\"><span class=\"byline__preamble\">By <\/span><span itemprop=\"name\"><span class=\"byline__name\">Scott Gilbertson<\/span> <\/span><\/p>\n<p>For even more peace of mind, though, if Google gives you a failing password great you should strongly consider a dedicated password manager like Dashlane, LastPass, and 1Password. They offer even more features: secure storage of credit card and other details, real-time alerts if your password gets exposed, support for two-factor authentication, and more. Password managers are also browser neutral. If you skip between Chrome and Safari, and Android and iOS, a dedicated password manager can go with you and keep everything synced across all the devices you&#x27;re using.<\/p>\n<p>Meanwhile, now you know why Chrome is warning you about your passwords, and what you can do about it. It&#x27;s worth spending a little time to fix any password problems that are detected. You&#x27;ll be glad you did if it keeps your key accounts safe.<\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/chrome-password-popups\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5e22999394f53e0008341529\/master\/pass\/chrome-browser-password-2-81774681-final.jpg\"\/><\/p>\n<p><strong>Credit to Author: David Nield| Date: Sun, 19 Jan 2020 12:00:00 +0000<\/strong><\/p>\n<p>It could help save you when the next big breach hits.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714,21466],"class_list":["post-17485","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security","tag-security-security-advice"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17485","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=17485"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/17485\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=17485"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=17485"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=17485"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}