Proton Pass Retains Passwords in Cleartext Form in Memory

The Proton Pass password manager follows the bad practice of keeping unencrypted usernames and passwords in the computer’s memory. To make matters worse, this sensitive data is not wiped from the memory when the vault is locked post-login, making it susceptible to exfiltration by info-stealer malware or attackers with physical access to the target machine. …

The post Proton Pass Retains Passwords in Cleartext Form in Memory appeared first on RestorePrivacy.

access attackers bad computer data exfiltration info locked login making malware manager memory pass password password manager passwords physical practice privacy and security news proton proton pass sensitive sensitive data stealer unencrypted usernames vault