Lee, while I am not concerned about the privacy issue, I would like to 
know how the keychain is encrypted if I have no log-in password, nor 
put an extra password on the chain. ( one person = administrator etc, 
etc. - me ) And : all my preferences in Safari and Explorer also have 
all those usernames and passwords right in them. Were I to lock the 
keychain, would I also have to give this password everytime I logged on 
to a Safari website? It would drive me nuttier than I already am. Now 
to put in those notes for  card  and account numbers and that stuff I 
find attractive and already made use of it since you mentioned it. But 
then they are not safer than when I give them out and that I do 
everytime I buy something, and don't mention  private bank accts or 
health records!   On my keychain , though, I can find things easily and 
that counts.
Marta
On Wednesday, Jan 28, 2004, at 13:07 America/New_York, Lee Larson wrote:

> On Jan 28, 2004, at 7:44 AM, Suzanne asked:
>
>> I want to stop the auto-fill of passwords to increase security.  If 
>> they're not on the keychain, where are they?
>>
>> Will this actually increase security, or am I mistaken?
>
> By default, the Keychain database is strongly encrypted with your 
> login password as the passkey. For the extra-paranoid, an extra 
> (different) password can be added to the keychain file. With this 
> extra password, someone would have to go to extraordinary lengths to 
> read your passwords.
>
> The passwords for Apple's Mail.app and Safari are stored in the 
> keychain database. Other programs can also store passwords and 
> encryption keys there. For example, Mozilla, Internet Explorer and 
> Eudora use the Keychain.
>
> I use the Keychain to store other stuff because you can put notes into 
> it. My credit card numbers are there, as are all my passwords. Stored 
> there, they're a lot more secure than written on a sheet of paper, and 
> a lot easier to find.
>
>
>
> | The next meeting of the Louisville Computer Society will
> | be February 24. The LCS Web page is <http://www.kymac.org>.
> | This list's page is <http://erdos.math.louisville.edu/macgroup>.
>
>
Marta



| The next meeting of the Louisville Computer Society will
| be February 24. The LCS Web page is <http://www.kymac.org>.
| This list's page is <http://erdos.math.louisville.edu/macgroup>.


Reply via email to