Massive iOS 8 flaw suggests parts of your password in autocomplete

Massive iOS 8 flaw suggests parts of your password in autocomplete

This could potentially be a significant problem for anyone who has installed iOS 8 on their device. iDownload Blog points us to a new report from iGen.fr that claims iOS 8’s QuickType smart keyboard feature will actually suggest parts of your password as part of its predictive typing feature.

As an example, iDownload Blog notes that one user in Apple’s Support Communities has claimed that their keyboard has started “offering ‘OrangeJuice’ as a suggestion each time he would type in ‘AppleUser’ because QuickType remembered the ‘OrangeJuice!2′ password he previously used to log in to Outlook Web App.” Even worse, the user reported that QuickType would even suggest “other passwords from other services and old passwords that I already changed.”

Since people typically use the same passwords for a variety of different accounts, even having just one of them compromised could be potentially disastrous. And as Jennifer Lawrence and other celebrities have discovered, you really, really don’t want people to know your Apple ID password if you’ve uploaded nude pictures onto iCloud.

This issue was first flagged last week by German security research Stefan Esser, who was surprised that QuickType suggested his password even though it wasn’t a regular word.

iDownload Blog recommends that anyone with iOS 8 turn off the QuickType predictive feature until Apple addresses the issue.

SOURCE:

IGEN.FR, IDOWNLOAD BLOG, TWITTER (STEFAN ESSER)