(PSA == Public Service Announcement)<\/p>\n
From this interesting blog post<\/a>:<\/p>\n And now the explanation for the mysterious appearance of credentials becomes clear: When the user logged into the Internet Cafe PC, any random credentials that happened to be on that PC were silently imported into their MSA\/AAD account and will now roam to any PCs sync\u2019d to that MSA\/AAD account.<\/p>\n Now, there\u2019s a further issue to be aware of: If you log out of a browser\/sync, by default, all of your roamed-in credentials are left behind<\/a>!<\/strong><\/p>\n So, for example, if you logged into the browser on an Internet Kiosk, dutifully logging out of your profile after use, if you fail to tick this checkbox:<\/p>\n \u2026 the next person to use that browser profile will have access to your stored credentials. Even worse, if they decide to log into the profile, now your credentials are roamed from that Kiosk PC into their account, enabling them to log in as you <\/em>from wherever they go.<\/p><\/blockquote>\n Please read the blog post in its entirety. I wanted to higlight the above part though as it’s obvious in retrospect but I hadn’t realized signing in to a browser and then signing out leaves your passwords behind. Like I said, obvious in retrospect as I know that’s what happens with bookmarks, but I sorta assumed it wouldn’t be the case for sensitive info like passwords. To be safe and sensible: don’t ever sign in to a browser profile on any browser not on your own machine in the first place<\/em>. Heck, don’t save your passwords in your browser in the first place – use a password manager!<\/p>\n Although the above post is about Edge (and pretty sure Chrome too) it also applies to Firefox<\/a>. Unless you tick the box your passwords are left behidn.<\/p>\n","protected":false},"excerpt":{"rendered":" (PSA == Public Service Announcement) From this interesting blog post: And now the explanation for the mysterious appearance of credentials becomes clear: When the user logged into the Internet Cafe PC, any random credentials that happened to be on that PC were silently imported into their MSA\/AAD account and will now roam to any PCs … Continue reading PSA: Browsers and saved credentials<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[258],"tags":[1107,1108,289],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/7090"}],"collection":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/comments?post=7090"}],"version-history":[{"count":1,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/7090\/revisions"}],"predecessor-version":[{"id":7091,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/7090\/revisions\/7091"}],"wp:attachment":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/media?parent=7090"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/categories?post=7090"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/tags?post=7090"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}