I’m just scared that they’re saved with reversible encryption on the disk, then malware could steal them

  • sugar_in_your_tea@sh.itjust.works
    link
    fedilink
    arrow-up
    0
    ·
    5 months ago

    reversible encryption

    All encryption is reversible, otherwise it wouldn’t be encryption, it would be a hash. If you don’t use a password, it’s easy to reverse the encryption. If you do use a password, the maximum security with a brute force attack is 112 bits, which is pretty weak.

    I recommend using a different password management service (which also handles credit card info), any password manager will be fine. I personally use Bitwarden, which uses 256 bits of encryption. That’s pretty standard across password managers, so you’re better of focusing on making a secure password.

    That said, if you’re only worried about credit card info and not storing passwords in Firefox, you’re probably fine. Credit cards have a ton of protection, so if someone steals your card info, call your bank to dispute the fraudulent transactions and get a new card, it doesn’t cost anything and has little hassle. Debit cards are another story, so I recommend just not using debit cards at all online.

    • WIZARD POPE💫@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      5 months ago

      Prepaid debit cards for the win. You need to buy something online? Open your banking app, transfer the amount to the card, pay. After that the card is empty and cannot be used to pay flr anything until you need it again.

      • sugar_in_your_tea@sh.itjust.works
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        5 months ago

        That sounds like way more effort than a credit card, especially here in the US where transfers between banks take 2-3 days.

        If you really want to avoid credit, you can lock your debit card and unlock it when you make a purchase. That’s still annoying, but effective. But if you’re responsible, there’s really no reason to avoid credit, and you get rewards on top.

        • SirQuackTheDuck@lemmy.world
          link
          fedilink
          arrow-up
          0
          ·
          5 months ago

          especially here in the US where transfers between banks take 2-3 days.

          *Laughs in SEPA Instant Transfer*

          Anyhow, locking and unlocking is an option. Using “3D Secure” systems - which require a secondary approval via an app or website - works significantly better, and chargebacks are one tap in a banking app (modern apps, so US might again be fucked here).

          • setVeryLoud(true);@lemmy.ca
            link
            fedilink
            arrow-up
            0
            ·
            5 months ago

            If it gets stolen (i.e. scam, or breached website), you can’t charge back like with a credit card. That money is still gone, but you do limit your losses compared to using your main debit card.

            • WIZARD POPE💫@lemmy.world
              link
              fedilink
              arrow-up
              0
              ·
              edit-2
              5 months ago

              Oh yeah that is true. But at least if just your card details are stolen the card is unusable when empty. As I said it’s best to just keep it empty until you actually buy something and you just put on the exact amount you need.

              • setVeryLoud(true);@lemmy.ca
                link
                fedilink
                arrow-up
                0
                ·
                edit-2
                5 months ago

                Unrelated, I actually don’t know if prepaid Visa cards have the same protections as real credit cards. Something to look into, perhaps.

                • WIZARD POPE💫@lemmy.world
                  link
                  fedilink
                  arrow-up
                  0
                  ·
                  5 months ago

                  What would those be? I don’t have a xredit card so I have no idea what kind of protections they have? I know the prepaid does not work if the amount on the card is lower than the transaction you are trying to do.

                  • setVeryLoud(true);@lemmy.ca
                    link
                    fedilink
                    arrow-up
                    0
                    ·
                    edit-2
                    5 months ago

                    On credit cards, the most important protection is the ability to charge back fraudulent purchases. You just call your bank, tell them which purchase is fraudulent and you’d like charged back for which reason, they then contact the seller to determine what happened, and if they either don’t play ball or don’t answer, they charge back and rip the money out of the recipient’s accounts.

                    Real credit cards also have other protections, such as mobile device protection, travel insurance (cancellation, sickness, etc.), cash back (paid for by merchant with credit card fees), whatnot.

                    As for where to get prepaid cards, it depends on where you are, but in Canada, lots of banks offer pre-paid Visa cards, especially useful for teenagers so they can make online purchases without the responsibility of a credit card.

                    I just looked it up, it was actually pretty hard to find. Desjardins and Scotia both discontinued their prepaid cards, but here’s an example of one from CIBC: https://www.cibc.com/en/personal-banking/prepaid/ac-conversion-card.html