<![CDATA[Sync Security!]]>I use Opera sync and I puzzled so that when a new PC for synchronization, he dont need two-factor authentication(by mobile phone SMS). SO any one who knows my password get full sync with my browser. Is it normal?

]]>https://forums.opera.com/topic/16108/sync-securityRSS for NodeWed, 20 May 2026 11:50:23 GMTSun, 10 Jul 2016 16:16:57 GMT60<![CDATA[Reply to Sync Security! on Sat, 27 Aug 2016 08:46:43 GMT]]>guys, opera sync was hacked!

https://techcrunch.com/2016/08/26/opera-says-its-service-for-syncing-web-browser-data-was-hacked/?ncid=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=sfgplus&sr_share=googleplus&%3Fncid=sfgplus

]]>https://forums.opera.com/post/105589https://forums.opera.com/post/105589Sat, 27 Aug 2016 08:46:43 GMT<![CDATA[Reply to Sync Security! on Fri, 26 Aug 2016 19:29:45 GMT]]>

Some people don't have cell phones, plus I saw a post on Slashdot recently that a government agency was advising against using SMS for authentication.
There's little that would be considered private on the web interface anyway - are your bookmarks embarrassing? Passwords are only in the browser.

You cant sync passwords without third party copy so passwords have to be also at Operas servers.

]]>https://forums.opera.com/post/105555https://forums.opera.com/post/105555Fri, 26 Aug 2016 19:29:45 GMT<![CDATA[Reply to Sync Security! on Sun, 21 Aug 2016 09:09:41 GMT]]>There are "authenticator" apps for PCs too, I use "2 Factor Authenticator" on Windows 10 to access my team viewer account.
These apps don't use SMS, so they are not costly to implement.

]]>https://forums.opera.com/post/105220https://forums.opera.com/post/105220Sun, 21 Aug 2016 09:09:41 GMT<![CDATA[Reply to Sync Security! on Sun, 21 Aug 2016 01:53:05 GMT]]>Some people don't have cell phones, plus I saw a post on Slashdot recently that a government agency was advising against using SMS for authentication.

There's little that would be considered private on the web interface anyway - are your bookmarks embarrassing? Passwords are only in the browser.

]]>https://forums.opera.com/post/105204https://forums.opera.com/post/105204Sun, 21 Aug 2016 01:53:05 GMT<![CDATA[Reply to Sync Security! on Sat, 20 Aug 2016 21:34:10 GMT]]>Since sending SMSs is costly I think Opera could implement RFC 6238, like in Google Authenticator and other apps.

]]>https://forums.opera.com/post/105198https://forums.opera.com/post/105198Sat, 20 Aug 2016 21:34:10 GMT<![CDATA[Reply to Sync Security! on Thu, 28 Jul 2016 10:00:41 GMT]]>2FA would be great, although I can see that it would be expensive. Opera aren't nearly as big as the others who offer 2FA (such as Apple, Twitter, Facebook, Google, etc).

]]>https://forums.opera.com/post/103878https://forums.opera.com/post/103878Thu, 28 Jul 2016 10:00:41 GMT<![CDATA[Reply to Sync Security! on Mon, 25 Jul 2016 04:25:19 GMT]]>If you are worried about your passwords, then don't sync them. You can choose what data to sync.

]]>https://forums.opera.com/post/103700https://forums.opera.com/post/103700Mon, 25 Jul 2016 04:25:19 GMT<![CDATA[Reply to Sync Security! on Mon, 25 Jul 2016 03:41:40 GMT]]>

But can't someone with those same credentials use them in any Opera browser to sync that browser to my account?

In theory, yes. But why someone would do it?

]]>https://forums.opera.com/post/103697https://forums.opera.com/post/103697Mon, 25 Jul 2016 03:41:40 GMT<![CDATA[Reply to Sync Security! on Mon, 25 Jul 2016 02:54:03 GMT]]>

Maybe, but what i'm saying is that if someone go to https://sync.opera.com/web/ and manage to login with your >credentials, your passwords can not be viewed.

But can't someone with those same credentials use them in any Opera browser to sync that browser to my account? Then they can read my passwords in "Manage saved passwords" can't they, providing I am syncing passwords?

This worries me because I recently found under Other Speed Dials, a device name I have never seen before so I wonder if someone was able to sync to my account and its data.

]]>https://forums.opera.com/post/103694https://forums.opera.com/post/103694Mon, 25 Jul 2016 02:54:03 GMT<![CDATA[Reply to Sync Security! on Mon, 18 Jul 2016 02:42:46 GMT]]>

That encryption doesn't mean anything if the account password is compromised.

Maybe, but what i'm saying is that if someone go to https://sync.opera.com/web/ and manage to login with your credentials, your passwords can not be viewed.

Implementing support for 2FA would help ensure that data is only accessible by the account owner.

Right, but it has costs.

]]>https://forums.opera.com/post/103176https://forums.opera.com/post/103176Mon, 18 Jul 2016 02:42:46 GMT<![CDATA[Reply to Sync Security! on Sun, 17 Jul 2016 22:44:19 GMT]]>

Sensitive data like passwords are stored encrypted. Other data transits encrypted between computer and servers.

That encryption doesn't mean anything if the account password is compromised. Implementing support for 2FA would help ensure that data is only accessible by the account owner.

]]>https://forums.opera.com/post/103169https://forums.opera.com/post/103169Sun, 17 Jul 2016 22:44:19 GMT<![CDATA[Reply to Sync Security! on Sun, 17 Jul 2016 22:15:00 GMT]]>Sensitive data like passwords are stored encrypted. Other data transits encrypted between computer and servers.

]]>https://forums.opera.com/post/103165https://forums.opera.com/post/103165Sun, 17 Jul 2016 22:15:00 GMT<![CDATA[Reply to Sync Security! on Sun, 17 Jul 2016 21:47:06 GMT]]>

Is this something that is coming? Should really be standard at this point. I at least want a prompt if someone is trying to log into opera with my account and it is not me....

I would expect the team to know how important it is to protect the sensitive data of their users, which is being synced using the company servers.

]]>https://forums.opera.com/post/103162https://forums.opera.com/post/103162Sun, 17 Jul 2016 21:47:06 GMT<![CDATA[Reply to Sync Security! on Sun, 17 Jul 2016 00:56:03 GMT]]>

Is this something that is coming?

I don't think so.

]]>https://forums.opera.com/post/103110https://forums.opera.com/post/103110Sun, 17 Jul 2016 00:56:03 GMT<![CDATA[Reply to Sync Security! on Sun, 17 Jul 2016 00:10:20 GMT]]>Is this something that is coming? Should really be standard at this point. I at least want a prompt if someone is trying to log into opera with my account and it is not me....

]]>https://forums.opera.com/post/103109https://forums.opera.com/post/103109Sun, 17 Jul 2016 00:10:20 GMT<![CDATA[Reply to Sync Security! on Sun, 10 Jul 2016 19:02:33 GMT]]>

Is it normal?

Yes.

]]>https://forums.opera.com/post/102805https://forums.opera.com/post/102805Sun, 10 Jul 2016 19:02:33 GMT