Thwart password-hungry keyloggers with a Greasemonkey script
If you're not quite ready to use a cloud service like LastPass to manage your passwords, you can still provide yourself some additional protection from keyloggers with a handy GreaseMonkey script.Install Virtual Keyboard Interface and double-click any text field, textarea or password field to display it. Instead of typing on your keyboard, just click the virtual keys.
It works almost everywhere, including fancy Web 2.0 Ajax forms.
This is an excellent script to add to your Portable Firefox install for use on unfamiliar computers. For example, the one some friends of mine used in a hotel lobby that captured an email password and ultimately allowed a thief access to their bank account.












Comments
5
Subscribe to commentsMarkJan 21st 2009 1:49PM
That's nice and all but Windows already has a virtual keyboard built in.
jegormeisterJan 21st 2009 2:17PM
i was about to say the same. just type osk in run and you will see the OnScreenKeyboard
Jash SayaniJan 21st 2009 1:51PM
Nice... How about a WP plugin ??
Not every time I am in Firefox!
sjones411Jan 21st 2009 4:50PM
This is a clever idea if your kids/employer are using some sort of hardware or weak software keylogger, but most mal-ware which is out there to steal your bank accounts are using screen captures to get around virtual keyboards. If you open up a page with a login, they'll take a screenshot of the area around the mouse during each click. Just a head's up for you security minded users.
KeyboardJan 31st 2009 4:08AM
I have to say virtual keyboard like this http://hot-virtual-keyboard.com/ or windows built-in keyboard don't protect from keyloggers. They work like normal keyboard.