Keep your memory dump shut: Unveiling data leaks in password managers

arXiv:2404.00423v1 Announce Type: new
Abstract: Password management has long been a persistently challenging task. This led to the introduction of password management software, which has been around for at least 25 years in various forms, including desktop and browser-based applications. This work assesses the ability of two dozen password managers, 12 desktop applications, and 12 browser-plugins, to effectively protect the confidentiality of secret credentials in six representative scenarios. Our analysis focuses on the period during which a Password Manager (PM) …

applications arxiv browser cs.cr data data leaks desktop forms introduction leaks led management managers memory password password management password management software password managers software task work