Login security

Login security

Login security

Your-Customer
I'm a Participant Level 2

Login security

 The login page for the fido website should not "show password" for one populated from a secure keychain. What if someone were to have a look at the prefill and decide to try it on my other accounts? That would be a password breach and security leak directly attributable to fido programming.

2 REPLIES 2
FidoKenny
Moderator

Hello @Your-Customer and welcome to the Community and thank you for sharing feedback.

 

Can you clarify?

 

Most websites do provide the auto populated password if you decide to save your username/password. Which makes it easier to login the next time you try to access your account.

 

However, they are always hidden, and you do have the option to remove it from the options of your browser.

 

Let us know.

 

 



Your-Customer
I'm a Participant Level 2

Thanks for taking a moment to address my question. I didn't realize that the 'reveal password' was universal across all sites and is browser dependent. I appreciate the follow-up.