🔧 AI Nachrichten Major AI platforms go down in unprecedented simultaneous outage(03.09.2026 um 17:34 Uhr)
🔧 AI Nachrichten ChatGPT, Claude, and Grok Down? Users Report Widespread Outages(03.09.2026 um 19:14 Uhr)
🔧 AI Nachrichten OpenAI Launches GPT-6 Astra, Says We May Have Entered the AGI Era(03.09.2026 um 22:08 Uhr)
🔧 AI Nachrichten Claude Comes to CarPlay as Fifth Major AI Chatbot App(05.09.2026 um 05:31 Uhr)
🔧 AI Nachrichten OpenAI’s GPT-6 Astra Is AGI, Says NVIDIA CEO Jensen Huang(07.09.2026 um 06:31 Uhr)
🔧 AI Nachrichten Blame AI companies for Mac mini and Mac Studio shortage(31.08.2026 um 10:32 Uhr)
🔧 AI Nachrichten Major AI platforms go down in unprecedented simultaneous outage(03.09.2026 um 17:34 Uhr)
🔧 AI Nachrichten ChatGPT, Claude, and Grok Down? Users Report Widespread Outages(03.09.2026 um 19:14 Uhr)
🔧 AI Nachrichten OpenAI Launches GPT-6 Astra, Says We May Have Entered the AGI Era(03.09.2026 um 22:08 Uhr)
🔧 AI Nachrichten Claude Comes to CarPlay as Fifth Major AI Chatbot App(05.09.2026 um 05:31 Uhr)
🔧 AI Nachrichten OpenAI’s GPT-6 Astra Is AGI, Says NVIDIA CEO Jensen Huang(07.09.2026 um 06:31 Uhr)
🔧 AI Nachrichten Blame AI companies for Mac mini and Mac Studio shortage(31.08.2026 um 10:32 Uhr)
1 Tag Serie
📰 IT Security Nachrichten 🕛 kürzlich 3 Min Lesezeit SECURITY-FEED
0

Timeouts on security products: should you use them?

↗ Quelle (reddit.com)
🗣️ Stimme:


I use a password manager on my Windows PC. Currently, I have the manager time out after 'x' seconds of inactivity. The story I'm telling myself is that my passwords are safer if only decrypted briefly when I actually need them, and then locked at other times.

Whether this is true, depends on the environment, so I'll explain mine:


  • PC is at home
  • Everyone in my house is fully trusted
  • However, computer could be physically stolen if someone broke in
  • Possibly malware from the net could exist on the computer (even though I have a virus scanner)

Is there added security by keeping secured data on the computer locked, and then unlocking it only when necessary?

As a second example, let's assume I have two drives on the same PC: Drive 1: encrypted with BitLocker sitting behind a Windows login password (unlocked 12 hours a day whenever I'm logged into Windows and using my computer, and locked whenever I'm not using it). Drive 2 encrypted with TrueCrypt, that is only unlocked briefly when I need it (5 minutes a day). The TrueCrypt drive times out and relocks on inactivity . Does the timeout on the TrueCrypt drive make it a safer drive to store my secrets on than the BitLocker drive, which is unlocked whenever I'm present at the computer? Or if I unlock a drive at all on the computer (even briefly), is it fully exposed anyway?

I'll attempt to answer my own question to give you insight into what I'm thinking


  • If you've got a keylogger on your computer, timeouts are irrelevant, because everytime you unlock your password manager/TrueCrypt drive, you're giving away your password.
  • Timeouts will help protect you (somewhat) from new malware that arrives on your computer, that is yet undetected. The probability is that your TrueCrypt drive/password manager (only decrypted on demand) is locked most of the time. If the malware is scanning your hard drives and uploading the contents to some evil site, it might not even be specifically looking at what you're doing for the few minutes you unlock your secrets. By keeping your secrets locked most of the time, you dramatically increase the chance that they will remain safe, even on an infected computer.
  • Timeouts are not important if your computer is stolen. Either system requires a password if the computer has been disconnected from the power.

So do you agree that security timeouts are worthwhile in the scenario I've described? Or do you think that if you unlock a password manager/encrypted drive on a PC at all, that it's been fully exposed, so it may as well be left open all the time (when you're logged into your computer) anway?


submitted by [comments]
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf reddit.com.
↗ Original-Artikel auf reddit.com lesen
Wie bewertest du diesen Beitrag?
1 Klick Feedback
Teilen mit Netzwerk & Team:
Community Threat-Level Barometer
Live Votum

Wie stufst du das Risiko dieser Schwachstelle / Bedrohung für dein Unternehmen ein?

Noch keine Stimmen — schätze das Risiko als Erster ein.

Community-Analysen & Experten-Meinungen 0

Verfasse deine eigene Analyse, teile Workarounds oder diskutiere diesen Vorfall im Blog.
Noch keine Community-Analyse verfasst. Markiere einen Textabschnitt oder klicke oben auf Eigene Analyse verfassen“!
Community Pulse: Relevanz-Einschätzung
1 Klick Experten-Votum
🔴 Akute Relevanz 0%
🟡 In Evaluierung 0%
🟢 Keine Auswirkung 0%
Spannende Innovation 0%
Verwandte Story-Cluster & Quellen (Vektor-KI)
Port 8095 Engine
3 Quellen
GPT-6 Astra Release Today? OpenAI’s Next Major AI Model Is Almost Here
1 Quelle
Apple accuses OpenAI of destroying evidence as trade-secrets fight intensifies
1 Quelle
Major AI platforms go down in unprecedented simultaneous outage