When you put in an incorrect user id and/or password , do companies/websites keep a record of that?
Like for example Joe1 had an incorrect login attempt at this time?
And if so how long do they keep record of that.
-6
-
2I'm voting to close this question as off-topic because it belongs on security.se – jmoreno Dec 3 '18 at 1:55
4
This is company dependent, normal security protocols would be 'yes', time could be unlimited it's just a log file. Mine has never been stopped or archived for years. I see what username they attempted with, ip address, the timestamp and the password they tried to use. This is a very basic log. Others are more intricate.
-
does It make it look suspicious if you keep clicking forgetting password? – Steve P Dec 3 '18 at 0:52
-
1Yes it does, certainly doesn't say anything positive anyway. Not an issue if it's something you rarely log in to. But it would catch my eye if someone was persistently having the issue on a system they use all the time. Depends what it is. – Kilisi Dec 3 '18 at 0:55
-
1This is a good example of how services that don't store your passwords as plain text in the obvious place still end up storing your passwords as plain text in their logs. Don't reuse passwords folks. – Nathan Cooper Dec 3 '18 at 1:23
-
@NathanCooper some do, some don't... mine are closed systems not publicly accessible, didn't bother getting too fancy. Some clients I set up don't store the password attempted, it's all down to the type of security you want to set up. These things are rarely done without putting a bit of thought into it. But I agree, DONT reuse passwords, it makes a single point of failure, never a good idea – Kilisi Dec 3 '18 at 1:25
-
1No, don't use the same password for all the different sites or apps, it means that if someone found out one password, they know them all... single point of failure... lots of people get caught out that way... someone gets their mail password, can access their facebook, other social media, internet banking, paypal etc,. – Kilisi Dec 3 '18 at 1:32
