Friday, November 29, 2013

Know your password in Web Browsers

We don't see our passwords as we type them in the password field in browser, because for security reasons, the password field in all browsers is masked with “asterisks” which won’t allow any third person to read the original typed password. There is actually technique for revealing the original passwords behind the asterisk symbol in password field.

Google Chrome:
Starting off with Google chrome, the easiest way to reveal the original passwords behind the asterisk is using inbuilt Inspect element feature in the browser.
  1. You just need to right click on the password field in the browser where you will get an option "Inspect Element". 
  2. After clicking on it, "Web Inspector" will open out and there you can see some code which is basically Html code and you just need to replace the "password" word with "text" word and it will reveal the words behind the asterisks.
You can use JavaScript which is quite quick and easy as compared to above method. Just open a site that allows users to login and after typing the password, just enter the following JavaScript code in the address bar.
Javascript: alert(document.getElementById('Passwd').value);
After entering the above code in the address bar, press enter and it will pop up a window with your password written on it.

Mozilla FireFox:
The google chrome browser technique is also applicable in Firefox.
  1. Open a site that asks for login right click on the password field in the browser where you will get an option "Inspect Element". 
  2. Click on it, "Web Inspector" will open out and there you can see some code which is basically Html code and you just need to replace the "password" word with "text" word and it will reveal the words behind the asterisks.