Protection of passwords

Hi, i have a question.

I store all my passwords in Firefox, and the profile of Firefox is located in the place, protected with TrueCrypt.

Ok, if someone has accessed my PC, he can't get them until he knows the password of the TruCrypt.

But. When I'm running Firefox, am I secure? I mean, can the passwords be accessed remotely, with a hacker or a malware, while I'm working with Firefox and and all the profile data is stored in RAM?

 

Your passwords could be accessed remotely because they are in Firefox

 

i dont know how secure the password saving thing on browsers are for remote access stuff, but anyone who actually sits down at your computer would potentially be able to access anything you have a password for if you just store them in firefox, obviously. i know thats not your question though. im just sayin its best to not even store your passwords on your computer at all if its for sensitive information like your online bank account or something. i like to keep the passwords that protect my computer off the computer the passwords are protecting. keep them on a piece of paper in your wallet or something if you have too many to remember. thats what i do.

 

well ok. So I have one more question then. What is more secure - copy+paste password or type manually?
A paper is not a solution, there are much more chances to loose it...


PS.
OLIVER_TECHMASTER, your PC config is sweet

 

Copy paste would defeat some keyloggers as the keys aren't being pressed tolog, assuming the machine is clean when you generate that file . Also assuming that the file is stored somewhere secure and not accesible. As for remote accessing passwords through firefox, its not a firefox issue but a malware/bad site which would nab a password stored in ie just as likely. Truecrypt is a good product and your password file is stored in a truecrypt volume, you should be fine.