Browser Password security

[maxrebo]

Hi,

Just wondering, should we be stopping staff saving passwords in the browser?

I know you can disable this in Group Policy.

 

It seems an obvious one to disable for me but wondering what others do?

 

Regards

[itskdog]

If you don't have a third-party password manager, the browser password manager is better than nothing. Especially if you have syncing forced on, most browsers these days prompt to use a randomly-generated password when they see a password creation prompt.

 

Making people type in passwords encourages password reuse, which is the opposite of what you're wanting.

[synaesthesia]

Was going to say, this goes against recommendations - it encourages misuse, postits etc so not a good thing to do.