,
6 tweets,
1 min read
Read on Twitter
I found my Gmail password in a credentials dump a few months ago. It's my most sensitive password and I can't figure out how it got there. What'd I miss?
- Unique password, generated for that site.
- I only log in on two personal devices that I own, no libraries or friends' computers.
- I have virtually no apps and 0 extensions.
- I only log in on two personal devices that I own, no libraries or friends' computers.
- I have virtually no apps and 0 extensions.
- I don't save it in a password manager.
- OSes are up to date.
- OSes are up to date.
By process of elimination, my tentative conclusion was that I was phished. But I very rarely enter my password (to the point I have trouble remembering it) and then why would it get dumped?
lol credentials dumping is the wrong phrase guess I mean a password dump it's 4:30 and my brain is broken
I figured it out - I let someone use my computer, and they installed a shady extension (which was later deleted). Siiiiiigh. Moral of the story: never be nice. (Real moral: use 2FA, which saved my account :)
