Replies

There are several free software apps that can recover passwords stored by browsers, e.g., NirLauncher (http://launcher.nirsoft.net/). I have run that one on my own machines and it works, easily recovering passwords stored by browsers. That being the case, I can reasonably assume that passwords stored by a browser are not sufficiently secure and could possibly be retrieved remotely. And that is why I never use a browser to store passwords. That type of software cannot retrieve passwords encrypted in something like Password Safe.

I dl’d NirLauncher and ran the PasswordFox against my own Firefox, which has the master password set. PasswordFox listed information about what sites I had saved passwords for and the fields in which the login/passwords are saved for, but it listed none of the actual usernames or passwords. I also it with the administrator option, but it found none of my logins/passwords for firefox.