CyberCertPrepWeb App FundamentalsBrowser SecurityEASYFree question
What risk is associated with a browser storing passwords in its built-in password manager?
- A.Stored passwords are sent to all websites visited
- B.Browser password managers use MD5 to store passwords
- C.If the user's device is compromised, malware or an attacker with physical access may be able to extract stored passwords from the browser's storage
- D.They do not support long passwords
Why C is correct
Browser password managers encrypt stored passwords, but the master key is tied to the OS login. Malware running as the user, or an attacker with OS access, can potentially extract them. Enterprise solutions and dedicated password managers offer better isolation.
Know someone studying for Web App Fundamentals? Send them this one.