Caught my password manager auto-filling on a fake login page

Last Tuesday I was logging into my bank and the page looked normal, but the URL was off by one letter. My password manager filled everything in anyway. I almost hit submit before I noticed the padlock icon was missing. That's when it hit me: I'd been trusting the autofill to verify the site for years. It never once stopped me on a phishing page. I switched to requiring manual entry for every login after that. Anyone else rely on autofill as a security crutch without realizing it doesn't check squat?

2 comments

Log in to join the discussion

Log In

2 Comments

alicecraig1mo ago

Honestly I had the same scare with my email and now I just use autofill for usernames only, passwords I type by hand every time. It's annoying but I've caught two sketchy sites since then, so it's worth the extra 10 seconds.

6

aaron7401mo ago

Man, that sounds like a bad day for sure, but I think you might be overreacting a bit.

4