adTyping could reveal passwords.

Hello, A warning from Malwarebytes Labs. The sound of you typing on your keyboard could reveal your password | Malwarebytes

Amazing discovery!
And yet another reason why using password managers.

Thank you for sharing, it's much appreciated, I love these types of news.

It only worked beause each key was recorded twenty times and the 'system' knew which key made which sound or set of sounds.

When I approached a security door at work, the kind with a keypad, if I had a stranger with me, I would key in many more numbers than required as it would be very difficult for someone to remember. Only the last four numbers mattered. On a computer, you can type in additional letters and then backspace to confuse any observer. When I log into my antivirus I have to use a mouse on a list of letters.

On my Bitcoin wallet the keys have a different value each time. So I am completely relaxed about this issue.

kelper said:

On a computer, you can type in additional letters and then backspace to confuse any observer.

Click to expand...

Backspace has so specific sound that you don't even need software to record a difference, you can hear it with your ears lol

This is nothing new. Side channelling was being discussed back in the 90's, possibly earlier. I recall many a thread on my BBS discussing various ways of listening in on ones activities.

There are many methods of discovering a persons password without being in proximity of or recording, keyboard sounds. None of which rely on 'hacking' ones computer.

Why do you think backspace has a unique sound? It may do on a mechanical keyboard, but not on my laptops.

@kelper
Indeed! I have mechanical keyboard it's loud as hell and Backspace and Enter keys are very specific in sound.

True on laptop the story is different and it's much harder to diff. key presses.

I use 2 password managers but more importantly, I use copy & paste where possible.

Pnokio said:

I use 2 password managers but more importantly, I use copy & paste where possible.

Click to expand...

copy\paste passwords is not safe because malware can capture clipboard.
you password manager should support autotype to bypass clipboard and type directly into login form.

zebal said:

copy\paste passwords is not safe because malware can capture clipboard.
you password manager should support autotype to bypass clipboard and type directly into login form.

Click to expand...

Can you elaborate on how to do it in Lastpass + Bitwarden please.

Pnokio said:

Can you elaborate on how to do it in Lastpass + Bitwarden please.

Click to expand...

Sadly I can't because I never used these, but I suggest you to try out my favorite password manger:
Password Safe

It supports customizable autotype plus several other essential security features like virtual keyboard.

Personally, I use Keepass Password Safe it is free to download and use and you can download a portable version.

After you fill out the site/password card and add the URL for a site, you can then click a button to go to the site and click another button to auto add your credentials for logging in etc.