Do websites that skip the login screen increase your security risk?

Question

Hi Angus,

I am upgrading my IT security and this has included using more complex passwords and password software but I have noticed that many websites bypass the login screen altogether. Does that increase the risk of security and if so how do I stop it happening?

Yours sincerely,

Daniel

Answer

Hey Daniel,
It's great to hear you're doing a security checkup, something I suggest once a year or as you feel its needed.

With the websites remembering you, this is probably using cookies (sessions) saved from recent a sign in.  That's fine, but what I would like draw to your attention to screen locking.

Whenever I walk away from laptop, even if I'm the only one in the office, I will lock my Mac (using screen saver hot corners), it's become a habit, and it is great for your personal security.

Same goes for my iPhone, it lock automatically. Phones and tablets these days have device encryption enabled out of the box.

For any device with sensitive accounts, we want it to lock screen immediately when not in use. Biometrics (face/touch ID) makes this easier.

The other thing to ensure is your Windows laptop has full disk encryption turned on, to keep prying eyes out if you do lose the computer.