TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

The horror of trusting Google with your passwords

15 点作者 im_jerry87超过 2 年前
I had a little panic attack today while trying to log in to my work.<p>I&#x27;d like to share the story here so that people just stay away from Google&#x27;s password manager.<p>I use Bitwarden for all of my important passwords like that of my bank, Google, and Apple accounts.<p>But for the ones I&#x27;m required to sign out every day like Work, I used to save my pwds in Chrome&#x27;s password manager as it&#x27;s my default browser.<p>My company requires changing pwds every 90 days or so. I changed pwds for Citrix and my Company&#x27;s portal a few weeks ago and saved them in Chrome. And, I&#x27;ve been logging into work using the same until this morning.<p>Today, I tried to sign into my work as usual, but authentication failed. That&#x27;s weird, so I thought my 2FA got screwed up. I use WinAuth on my work computer. So, I tried getting codes from Authy installed on my mobile. Still, authentication failed.<p>So, I go check my pwd in Chrome and to my absolute disbelief, the passwords got changed to old ones. I remember old pwds &#x27;cause they were not that strong and I had easy-to-remember passwords. Only the last time, I picked strong pwds. I also check Citrix, same story. The password got changed.<p>I immediately reached out to the phone wishing sync somehow failed and I would see my latest pwds, but no.<p>Luckily, I generated both of these pwds using Bitwarden&#x27;s password generator and I found out today it saves a history of the most recently generated pwds. And, I was able to get these passwords from there using trial and error. I didn&#x27;t generate too many pwds recently, so I took only a few tries. Bitwarden saved my ass today.<p>I felt so dumb for not saving generated pwds then and there in Biwarden. I trusted Google&#x27;s solution to be reliable. Learned my lesson today. I also plan on keeping my pwds at sync in 2 places. Maybe in iCloud as a backup for Bitwarden.<p>Always have a backup of your passwords, people.

3 条评论

verdverm超过 2 年前
I&#x27;ve been using Google Passwords for 10+ years and have never had this issue. Are you sure you didn&#x27;t forget to save them or that the company has bad enough change vs login pages that they look different to Chrome? I&#x27;ve had issues with the second case, where the new password will be saved for a different page because websites are bad.
评论 #34567534 未加载
Rob_Glick超过 2 年前
I feel you yesterday I switched to a more privacy focused OS on my Pixel. I encrypted my passwords before sending to google servers so went I went to there website to export my passwords it wouldn&#x27;t so I was stuck. Thank goodness I was signed in with my iPad using chrome browser because I could copy and paste one by one. So needless to say I moved to bitwarden. My fault for not exporting first but wow what a Job.
bluskiesok超过 2 年前
Google&#x27;s password sync is not always 100℅. And it is Best Practice to Always save passwords in at least two different secure locations Have a nice day.