What Are the Risks of Storing a "Personal" Email Password Password Locally?

2

I sometimes use MS Outlook 2010 on my home PC to check my personal Hotmail, but I have to type my password in every time I connect. What risks would I face if I allowed MS Outlook to memorize my Hotmail Password?

Notes:

  1. I'm pretty sure I have Outlook setup to use encrypted authentication with the Hotmail server
  2. My user account that hosts my Outlook client is secured with a reasonable password
  3. I use a mediocre quality hardware Firewall to "secure" outbound traffic
  4. I use a well known software Antivirus/Firewall solution

Shawn Eary

Posted 2012-01-28T21:16:01.143

Reputation: 225

Answers

2

Quite safe. Outlook does not store your password in plain text, it uses Windows Network Password to save your credentials.

When retrieving the email, Hotmail uses an SSL-secured connection so that's OK there too.

As for your firewall and anti-virus, they're probably the weakest link, but they do go a long way to keeping it safe. The anti-virus is by far the most important one, so make sure you keep it up to date.

It's important to note though that no password is ever 100% safe, so I don't want you to misconstrue this answer as saying such. But it's reasonably safe, safe enough for any personal email account anyway.

Just remember that if someone steals your computer and is able to unlock it, it doesn't matter that they don't know your password, they will be able to get into your email anyway because it's been saved.

Mark Henderson

Posted 2012-01-28T21:16:01.143

Reputation: 5 956

"The anti-virus is by far the most important one..." - Have there been many instances of "mean" code using the mentioned Windows Network Password API to gain email access in the past? – Shawn Eary – 2012-01-29T03:58:21.760

Not that I am aware of, but it's most probably what would happen if there were an attack vector against it. – Mark Henderson – 2012-01-29T06:23:15.007