↓ Skip to main content

“The RoboForm program unwisely tied the random passwords it generated to the date and time on the user’s computer”

Kim Zetterwired.com ↗

RoboForm’s “random” passwords before 2015 were a function of the clock. Joe Grand rolled the date back and regenerated a 20-character password created on May 15, 2013, at 4:10:40 pm. Siber Systems quietly fixed it in version 7.9.14 and never appears to have told customers to change those passwords. The product has more than 6 million users, and every pre-2015 password it generated is a lookup.