Kudos1 Stats

Are passwords safe when Password Manager Safe is open?

When the safe of my Password Manager is open (eg via the Password Manager Extension in my browser), are then the passwords still save? Should the safe immediately be closed again after opening to protect the passwords?

Many thanks for any help.

Wenn der Safe meines Password Managers geöffnet ist (zB durch die Password Manager Erweiterung im Browser), sind dann meine Passwörter noch sicher? Sollte ich den Safe nach dem Öffnen sofort wieder schliessen um die Passwörter zu schützen?

Vielen Dank für jegliche Hilfe.

Replies

Kudos1 Stats

Re: Are passwords safe when Password Manager Safe is open?

fwiw ~ my understanding:
NPM > Unlock vault...when you can read your credentials and passwords are not just hiding behind dots...your credentials load in process memory unencrypted.  

1) Does NPM store sensitive data (master password and entry passwords) encrypted in process memory?

2) Does NPM erase all security-critical memory when it is not needed anymore, overwrites these memory areas before releasing them?

3) Does NPM store the complete database encrypted, not only the password fields. Are user names, notes, etc. encrypted, too?

4) Does NPM use master password in a secure dialog?

IMO ~ the only times your credentials are safe is when your vault is locked.  Just me. 
IMO ~ where/how you store credentials (local/online) is less critical than where/how you use credentials.  Just me. 

Caveat: Norton Password Manager is not my daily rider. 


Are password managers secure?
https://us.norton.com/blog/privacy/password-manager-security

Setup Passwordless Vault Unlock for Norton Password Manager
https://support.norton.com/sp/en/us/norton-identity-safe/7.2.1.3/solutions/v128979256

FAQ: Passwordless Vault Unlock
https://support.norton.com/sp/en/en/home/current/solutions/v136450325

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

This is an interesting thread that I plan to follow. Thank you for bringing up the topic.

I believe all the points that bjm_  has made above are of great importance. The data is encrypted in the Norton cloud and also encrypted when you receive it. The vault password is the key used to unencrypt.

But what happens when your browser extension is open and password manger is displayed?  Can a rogue program now read the plain text and can it find that plain text in memory after the browser extension is closed?

Can a program capture your password when you enter it into a field on a bank website? It is encrypted when sent via https or maybe your VPN but can it be recorded as you enter it like maybe Norton Family does to help parents see what their children are doing?

We need some help here from Norton since only the programmers would know about how these things have been designed and implemented.

Kudos1 Stats

Re: Are passwords safe when Password Manager Safe is open?

But what happens when your browser extension is open and password manger is displayed?  Can a rogue program now read the plain text and can it find that plain text in memory after the browser extension is closed?

Can a program capture your password when you enter it into a field on a bank website? It is encrypted when sent via https or maybe your VPN but can it be recorded as you enter it like maybe Norton Family does to help parents see what their children are doing?

These things are why you install a security software like Norton 360. Those rogue programs should never get on your system if you have a good security app installed. 

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

I ask norton they inform me that it was safe when it Was open

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

Thank you guys for all your comments. I feel a bit safer now. The article which bjm_ referred to was quite reassurring:

https://us.norton.com/blog/privacy/password-manager-security

thanks for that. Still, it is not quite clear that, with the vault open, I can read all passwords unencrypted, so isn't there a possibility that other can do so as well? I may not get a final answer to this, so I try to close the vault after usage. A good thing would be that the vault closes automatically after say 10mins of not using it, to avoid that one forgets to close it.

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

the data is Encrypted when it is open

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

@globus5000,

The data is encrypted where? In memory? On disk? On screen?

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

globus5000:

the data is Encrypted when it is open

when the vault is open - data is readable = not encrypted

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

When it is open i ask one at norton who now things open=encrypted but the only thing is thet one who can see you screen can see them ore get to norton to get the Keys that the only way
Kudos0

Re: Are passwords safe when Password Manager Safe is open?

globus5000:
When it is open i ask one at norton who now things open=encrypted but the only thing is thet one who can see you screen can see them ore get to norton to get the Keys that the only way

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

Get to nortons database ore one see you computer screen ellers it always encrypted open and close and thats true the man i talk to is high rank so he now things

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

globus5000:

Get to nortons database ore one see you computer screen ellers it always encrypted open and close and thats true the man i talk to is high rank so he now things

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

it is always encrypted i ask one i now at norton in eu in the danish departmen and told me you are ok i can ask for more if you whant to now more

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

try Copy Password => Paste

I see plaintext.  Maybe, you see encrypted text.  

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

that was not what you ask aboute that you ask aboute i ask

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

and you can only use that if u see on the computer ore hack it

Kudos0

Re: Are passwords safe when Password Manager Safe is open?

globus5000:

that was not what you ask about that you ask about i ask

Topic = Are passwords safe when Password Manager Safe is open? 

Thanks
Regards w Respect