Privacy and Security: Never Save Your Password on Web Browsers

Most Internet browsers, like Microsoft Edge and Google Chrome, display a "Save Password?" prompt whenever a person logs onto a website. Clicking "Save" when that pop-up appears causes the browser to store the persons username and password so they do not have to type them the next time they log in to that website. Browsers can use this functionality to automatically fill out forms and login fields with information ranging from usernames and passwords to physical addresses, and even credit card information. While convenient, saving HMIS login information in a web browser can be a data privacy and security nightmare many things can go wrong if a user allows a browser to store your HMIS user credentials.

To take a common example, what if a user shares a computer with others? Storing their HMIS username and password on a work computer's browser is inviting trouble. Even if the user is confident co-workers or family members would never violate their privacy, there is no need to take that much risk for a little bit of convenience.

HMIS data privacy and security should be a priority for all of us, because of the sensitive nature of the data being entered into AKHMIS. We are stewards of the personal information of highly vulnerable populations in our state. ICA takes this responsibility very seriously, as reflected in the expectation that all who use Alaskas HMIS keep client information as secure and confidential as possible.

HOW TO PREVENT A WEB BROWSER FROM SAVING PASSWORDS

Password save settings can typically be managed from a Settings menu, which is often represented by an icon displaying three dots or lines. Instructions for accessing those settings in three popular web browsers have been included below:

Google Chrome: Open Settings menu => Select Autofill => Toggle off "Offer to save passwords."

Microsoft Edge: Open Settings menu => Select Profiles => Select Passwords => Toggle off "Offer to save passwords."

Mozilla Firefox: Open Settings menu => Select Privacy & Security => Scroll down to Logins and Passwords => Uncheck "Ask to save logins and passwords for websites."