Password Security

Associate
Joined
31 Dec 2004
Posts
1,384
Location
Essex, UK
I have just had an incident with paypal where someone has gotten a hold of £1000 from my bank and paypal account through my paypal account, I am currently awaiting on paypal to sort it out.

I had been changing my paypal password once every three months with a randomly typed 16 character password, other passwords less frequently. Is there a software out there that

1. will go on a USB stick.
2. that can auto change your passwords for you at a user specified time frame by logging into user specified accounts for you and filling in a random new password.
3. will autofill your passwords in when you want to access a site when the USB stick is in the computer.
 
point taken, its just I use quite a lot of passwords and changing them and keeping a list seems a bit of a pain in the butt when I could have it automated especially when what seemed like a very secure method of protection still ended up in me potentially losing £1000
 
Paypal are refunding, it took me a while to get it out of the person I was talking to but the same 'send to' account was used for multiple thefts.

I use spybot and ms security essentials and have run a check and no isng of malware.

As of yesterday I am now using keepass from a usb stick that I only put in when I need a password.

Paypal says the only way they could have done what they did is through having my user password and that it was, as suggested, accessed through phishing or key logging or visiting a questionable site but I am very conscious of not using the same user account on the computer for banking as I do for visiting potentially 'questionable sites' :D
 
Last edited:
24 hour turn around, its back in my account, i only reported it yesterday and was quoted 2 weeks originally. I am impressed with paypal for now.
 
Thats the most likely place for it to occur.

I just added another method of security for my paypal account as I do need one.

I have an old bank account that I never closed it only has £10 in it so that is the account I have linked to paypal.

If I need to send money I do a transfer from my main account to the one for paypal and make the purchase straight a way.

If I need to recieve money, as soon as I have it I transfer it to the main account.
 
Last edited:
Back
Top Bottom