Password

How to create a local account password reset option in Windows

Posted on by Martin Brinkmann

Using a local account in Windows 10 or 11 is good for privacy. It keeps the account local and reveals less information and data to Microsoft.

One of the drawbacks is that you cannot easily reset the account password in case you forget it. In fact, apart from brute forcing or hacking your way back in, there exist only two options to deal with the issue:

  • Answer security questions — This works only if you set a password during account creation and can remember them.
  • Use a password reset disk — This option is only available if you created one in the past.

Most Windows users may not have access to these, however.

Security questions

Windows 11 Creation of a local account
Creation of a local account on a German Windows 11 system.

When you create a new local account in the Settings app, you may add three security questions and their answers.

Note that this is an optional step, if you do not add a password to the account. If you do add a password, which you should in most cases, you are required to select three security questions and type answers for them before you may continue.

While it may be tempting to answer them truthfully, you may add to the security of the account by adding characters to it.

When asked about the name of your first pet, you may write Bello and be done with it. However, it may be easy to find out about the name of the pet or try common pet names. Add characters to Bello, say BelloX5, and you can be certain that guessing or knowing won’t get an attacker far.

You may also type random characters, but need a way to access these when you require them.

Creating a password reset disk

Password Reset Disk creation
First step of creating a password reset disk in Windows

The second password recovery option requires a password reset disk. This needs to be created before you run into troubles signing in.

Note: you need an USB Flash Drive for that.

Here is how that is done:

  1. You need to sign-in with the local account that you want to create a password reset disk for.
  2. Insert a USB flash drive into the computer.
  3. Open the Start menu and type Control Panel.
  4. Pick Control Panel from the list of results.
  5. Type Create Password Reset in the Control Panel search box.
  6. Select Create a password reset disk from the results.
  7. Click Next to start the process.
  8. Type the current account password on the next page.
  9. Disconnect the USB Flash Drive in the end and keep it safe.

Anyone with access to the USB Flash Drive may regain access to the local user account. Obviously, you could encrypt the computer using a program like VeraCrypt to add another level of security to it. I highly recommend doing so.

What about you? Do you prefer local or Microsoft accounts on Windows? Do you have password reset options available in case you forget your password?

Firefox

Mozilla extends Firefox support on Windows 7 and 8 devices

Posted on by Martin Brinkmann

Mozilla has changed the original end of support deadline for Firefox on Windows 7 and Windows 8 devices. The organization’s original plan was to end support in September 2024.

This coincided with the release of the next Firefox ESR base and would allow Mozilla to unload legacy code from Firefox.

Byron Jourdan, Mozilla’s Senior Director of Product Management, confirmed on Reddit that support will be extended.

He wrote:

We’re planning to extend support for Windows 7 users past the currently planned date and give them better options for migrating to a new PC when they choose to.

The confirmation was posted during an Ask Me Anything (AMA) session of Mozilla’s leadership team on Reddit in June (spotted by Sören Hentzschel)

Jourdan does not provide specifics on the extension, only that support will be extended for as long as usage numbers are still high.

About 10% of Firefox users are still using Windows 7 or Windows 8 / 8.1 at the time of writing. That is significant enough for Mozilla to extend support.

Firefox users who run the browser on Windows 7 or 8 devices were moved to Firefox 115 ESR some time ago. This is the Extended Support Release, which offers better stability as new features are only introduced when the ESR-base changes.

This happens when Firefox 128 is going to be released on July 9, 2024. The previous ESR, 115 in this case, continues to be maintained for a bit longer.

Mozilla planned to drop support for it on September 3, 2024 with the release of Firefox 115.15.

While the official release schedule has not been updated yet, it seems likely that Mozilla will extend the end of Firefox 115 ESR.

Chromium-based browsers like Google Chrome or Microsoft Edge are no longer supporting the old Windows versions.

Closing Words

Firefox users on Windows 7 or 8 will continue to receive security updates for the foreseeable future. Mozilla has yet to update the official support pages to reflect the change.

Do you use Firefox? Are you affected by the change?

Security

Should you save passwords in a browser?

Posted on by Martin Brinkmann

All modern web browsers include password management functionality. It makes sense on first glance to integrate the functionality; most users sign-in to services on the Internet regularly.

One of the main advantages of password managers in browsers is convenience. The browser recognizes new logins and prompts users to save the information. Similarly, it proposes to sign-in using saved data whenever a website is found in the password manager’s database.

It is handy and that is the reason why it is widely used.

Disadvantages exist as well:

  • Functionality is limited to a specific browser – Synchronization support may extend the reach, but it is still a limiting factor.
  • Automatic login functionality is limited to a browser – It cannot be used to sign-in to apps and other services that are not opened in the browser.
  • Protective features are limited — Usually to the device password or Pin.

Limited functionality

When you save a password in a browser, it is stored by it in a database on the local device.

If synchronization is enabled, the database will be synced across all devices on which the browser is installed and synchronization is enabled.

Still, it is limited to that browser. If you use multiple browsers, then you won’t be able to use the functionality there as well, unless you use import features.

The saving of passwords and automatic logins are also limited to the browser. If you need to log in to an application on the device, then you need to do so manually by copying the username and password from the browser’s password manager.

Security is limited

Security and protective features are another. Depending on the password manager, passwords may not be saved with a password. Some browsers support setting a primary password to protect the password database, but in many cases, it is not enabled by default.

Anyone with access to the PC may get access to the stored passwords of browsers. While that requires the account password for the PC in question, it may open up a can of worms in some cases.

The browser may prompt for a password or a pin when the password manager is opened and entries are inspected there. However, there is no such protection when visiting saved websites. Browsers like Chrome will fill out the passwords on the sites and sign-in users automatically.

It is even possible to show passwords in plain text by manipulating the HTML code of the website. This is not a problem if the account password is strong and you never leave the PC unattended.

Synchronization is convenient, but it moves the password database into the cloud. It is encrypted, but it adds another attack vector that would not exist if the database would be stored locally only.

How dedicated password managers compare

Here are the main differences:

  • A password is required to create a new password database — This means that it is protected by the device password and also the password the user selects during creation.
  • Additional protective features are available — This may include two-factor authentication for extra protection, customizing security features, such as the number of iterations.
  • Password managers run system-wide — You can use them to sign into apps or other services on the device, independent of any browser or program.
  • Self-hosting may be supported — Instead of relying on a server by a company, you can self-host the cloud space.
  • Open source and audits — Many browsers are not open source. Good password managers are audited regularly.

Some of the features depend on the password manager. My recommendation goes to Bitwarden and KeePass. There are numerous others that you can try.

Granted, password managers are not perfect. They cannot help you if you need to sign-in to a service on your Smart TV, but neither can browser password managers.

Closing Words

Using a password manager is highly recommended. If you use a browser password manager, make sure you configure extra security features, if needed. This may include setting up a primary password, enabling operating system protections, or using a strong device password or pin.

Standalone password managers offer more functionality. Good ones offer better security right away, more customization options, and a lot more that browser password managers do not support.

To answer the question of this article: a dedicated password manager is better in many regards, but it is still better using a browser password manager than none at all.

What about you? Do you use a password manager? If so, what is the program that you use currently and why?

Amazon displays more ads on its Fire TV platform

Posted on by Martin Brinkmann

One of the things that I really, really dislike when it comes to watching media is ads. Unfortunately, it appears that the trend is more ads, not less.

This does not happen only in streaming. Microsoft, for example, is pushing ads like there is no tomorrow in Windows.

Streaming, however, seems to be inclined to become the new cable TV, the very thing it set out to replace when it started.

Now it is Amazon again that is pushing the boundaries on its Fire TV platform. After enabling full screen video ads on the platform some time ago, it is now rolling out screensaver ads.

Tip: you can block fullscreen video ads on Amazon Fire TV.

Amazon may display a screensaver after some time of inactivity on part of the user. The change runs a full-screen ad for 30 to 60 seconds before the screensaver is started.

Cord Cutter News reports that the change is rolling out to all recent Fire TV products. The ads show up after a certain amount of inactivity. Amazon shows a full screen video ad then that runs for up to a minute.

Cord Cutter News saw ads for AT&T and Easy Spirit footwear so far. This change appears limited to Fire TV devices in the United States for now. It is probably only a matter of time before it lands in other regions as well.

Closing Words

It will become harder and harder to find streaming TV sticks and devices that do not push advertisement to the screen. There is also a trend towards ad-powered plans. While these are optional for the most part right now, it is clear that the current trend is more ads and not less.

Netflix is cancelling Basic plan subscriptions and pressuring subscribers

Posted on by Martin Brinkmann

Netflix customers who still have a Basic subscription will soon receive word from the company about it. Basic is going away. Netflix began by pulling the plan from its website and apps.

New users could not sign-up anymore for the plan, but the company did not touch existing subscriptions.

Now, it is targeting these subscribers.

The message is clear: Basic is going away, and you have to subscribe to another plan if you want to continue watching content on Netflix.

Basic subscribers have three options basically:

  • Subscribe to the Standard plan. It is more expensive, at $15.49 compared to $9.99 in the United States, but it offers additional features as well. This includes watching Netflix on up to 2 supported devices at a time, Full HD resolution support, and an option to add one extra member.
  • Subscribe to Standard with ads. Much cheaper, at $6.99 in the United States. Downside is that it includes ads that you need to endure.
  • Do nothing and stop using Netflix.

Netflix’s shows cancellation message to Basic subscribers

The first batch of Basic plan subscribers appear to have received notifications by Netflix about the upcoming end of their plan.

The message is displayed in fullscreen on the device. It says:

Your last day to watch Netflix is “DATE”.

Choose a new plan to keep watching.

Your Basic plan has been discontinued, but you can easily switch to a new one. Plans start at “MONEY” with upgraded features.

Reports claim that Netflix won’t open anymore unless users select a new plan, even if the planned cancellation date is in the future.

Why is Netflix discontinuing the Basic plan? The most likely answer is money. Users who switch to Standard pay more directly. Netflix revealed some time ago that Standard with ads is generating more money than the Basic plan.

Also, development and engineering has one less plan to worry about, which may streamline things further.

While Netflix may loose subscribers, it seems likely that a good percentage will switch to a different plan. Netflix will monitor the response in the countries that it launched the change in.

My advise continues to be the same: do some subscription hopping. Subscribe for one service for one or two months, then cancel and subscribe to another. This way, you do not really miss out on anything without breaking the bank. I expect the next round of price raises is not far away.

What about you? Do you have a Netflix or other streaming service subscription?

Nord Security launches File Checker online tool

Posted on by Martin Brinkmann

Nord Security, maker of the popular VPN service NordVPN, has published a new online tool. File Checker is a free online security tool to check files for malware.

Online virus scanners are useful to check a small number of files for viruses and other unwanted code. Google-owned Virustotal is probably the uncrowned king of these types of tools.

Here is what you need to know about the new File Checker tool:

  • It is free to use on the NordVPN website; an account is not required.
  • File Checker works on any platform.
  • Recommended file size is 50 megabytes or less, but it works with larger files. There is a limit though, as it would not scan a 160 megabytes file.

File Checker is also integrated into NordVPN’s Threat Protection feature. I did not give the feature a recommendation back then as it installed a certificate on the system that gave it a high level of control.

Threat Protection back then supported the scanning of files, but limited this to files of a size of up to 20 megabytes.

File Checker

The website provides little information on the File Checker technology. Most of the information is basic, explaining that you can get viruses through infected phishing emails or that PDF files can contain viruses.

In fact, the only information about File Checker is that it was created by NordVPN.

File Checker was developed by NordVPN, a global leader in cybersecurity with over 10 years of experience. Our experts curate a massive real-time database of threats and use advanced technologies, including artificial intelligence and machine learning, to continuously improve File Checker.

Nord Security maintains a list of threats and uses technology, including AI and machine learning, to improve it. This does not tell us anything about how good or bad the product is.

File Checker does have a few disadvantages when compared to Virustotal:

  • You can only scan individual files that are on the local device already and links. Virustotal supports this and it includes a Search for finding already scanned files.
  • Virustotal furthermore displays information about the scanned file, including details, behavioral information, and also community comments.
  • File Checker uses a single service, Nord Security’s own, to scan files for malware. Virustotal checks dozens of antivirus engines, which provides a clearer picture.

Should you use the standalone File Checker tool?

While it is commendable that File Checker is free, it is held back by the fact that it relies on a single threat database. Virustotal is the better option, as it provides results from dozens of antivirus services.

Furthermore, it is integrated in NordVPN, which means that all customers may enable this to get automatic file checking. Still, most antivirus applications support this as well.

What about you? Do you use online file scanning services to check downloaded files before you open them on your devices?

Microsoft resumes Windows 11 Update downloads – admits it breaks something else

Posted on by Martin Brinkmann

Microsoft stopped the distribution of the latest preview update for its Windows 11 operating system a few days ago. Back then the company said that it is pulling the update because of a critical issue it detected.

Tip: you can control optional updates via the Group Policy or Registry in Windows.

Here are the key points again:

  • Affected devices might enter a boot loop, which meant that Windows would not start anymore.
  • The culprit, according to Microsoft, was virtualization software.
  • Windows needed recovery operations.

Microsoft has now enabled the update again for most devices. The company notes on the updated Release Health website:

Availability of this update via Windows Update and Windows Update for Business was paused for a couple of days, but is being resumed today for most devices. This update offering is now paused only for devices affected by the issue. As a result, this update might not be offered to Hyper-V virtual machines running on hosts that utilize certain processor types.

In other words, Microsoft is blocking the update on affected machines to prevent the boot loop issue.

Taskbar woes confirmed

Microsoft has confirmed a second issue that is affecting the preview update. This issue may be rarer even, but it is still noteworthy.

According to Microsoft, the taskbar may not be shown or may not be interacted with on affected devices.

Here is what we known:

  • The issue affects so-called Windows-N editions only. N-editions of Windows do not have certain Media Features by default.
  • The issue affects non N-edition systems, if Media Features are removed on the devices. This can be done under Control Panel > Programs > Programs and features > Turn Windows features on or off.

Affected users may want to block the update from being installed on their devices. Since these updates do not install automatically, it is usually sufficient to avoid its manual installation.

Closing Words

Microsoft says that it is working on a resolution for both issues. It remains to be seen if it gets a fix out before the July 2024 Patch Day on July 9th.

Users affected by either issue may want to keep an eye on the Release Health dashboard to stay up to date. Unlike optional updates, Patch Day cumulative updates install automatically on most devices.

When do you install updates? Do you install optional updates, or prefer to install stable updates only? Feel free to leave a comment down below.

Brave

Brave Browser may support some Manifest V2 extensions even after Google’s shutdown

Posted on by Martin Brinkmann

There has been a lot of talk about Google replacing the extensions system of the Chromium web browser with an updated version. Chromium is the source for many browsers, including Google Chrome, Brave Browser, Opera, Microsoft Edge, and many more.

While open source, it is Google that controls Chromium to a large degree.

Brave Software, maker of the Brave Browser, has now announced its stance on existing extensions support and the upcoming changes.

Here are the highlights:

  • Classic extensions continue to work until at least June 2025. Brave activated an Enterprise-feature to extend support.
  • Brave Software plans to support a small number of extensions beyond June 2025: AdGuard, NoScript, uBlock Origin, and uMatrix
  • Brave Shields is unaffected.

Brave Software’s plan

Brave Software Manifest V2 Extensions page

All classic extensions will continue to work in Brave Browser until at least June 2025. Brave Software uses an official setting in Chromium to extend support.

Google plans to end support this year, but allows Enterprise customers to extend support by a year.

Come June 2025, Brave Software hopes that it can continue to offer support for four major content blocking extensions.

  • AdGuard
  • NoScript
  • uBlock Origin
  • uMatrix

This requires modification of Chromium code and the developers of the extensions according to Brave Software.

The company notes:

While Brave has no extension store, we have a robust process for customizing (or “patching”) atop the open-source Chromium engine. This will allow us to offer limited MV2 support even after it’s fully removed from the upstream Chromium codebase.

Extensions that become “stale or obsolete” may be removed. One example is the creation of a Manifest V3 extension that offers the same or similar functionality.

Brave users may control the four mentioned extensions, and any that may be added along the way, on the new Extensions page in the Settings.

Just load brave://settings/extensions/v2 to access it. Here users may enable or disable support for the Manifest V2 extensions. Note that this happens automatically, if one of the extensions gets installed in the web browser.

Closing Words

Manifest V2 extensions will eventually go away. While it is commendable that Brave Software plans to extend support for some beyond June 2025, it is clear that this is only a temporary measure.

Content blocking remains possible, even in Chromium-based browsers. The adblockers may not be as effective or feature-rich anymore, but it is likely that most blocking operations continue as before for the majority of users.

Those who want full control may switch to Firefox, as the Mozilla browser will continue to support Manifest V2 next to Manifest V3.

What about you? Do you use a Chromium-based browser and Manifest V2 extensions currently? What will you do when support ends?

Netflix

Netflix considering free ad-driven plan in some countries

Posted on by Martin Brinkmann

Streaming, which once set out to replace classic TV, is slowly but steadily turning into the very thing it set out to replace.

Those who still do not believe it may have a change of heart when they hear this: Netflix is apparently considering launching a free plan in some countries.

The plan will be ad-powered, which means that users will see advertisement whenever they tune in.

Depending on the country, this plan is going to make the ad-powered plan even cheaper. It is unclear at this point whether it will replace the Standard with Ads plan that Netflix currently offers, or if subscribers will have to sit through more ads to make up for the difference, or get another disadvantage.

Netflix’s motivation behind this is to get more customers in countries with potential for that. This is also the reason why it won’t offer the free plan in the United States.

The company hopes that this new plan will fuel further growth, which will make shareholders happy. It also needs to push ads to reach critical mass.

Considering that Netflix is a first-mover, it is possible that the likes of Disney, Warner, or Paramount will also switch to offering a free ad-driven plan. They followed Netflix’s introduction of an ad-drive plan and its fight against password sharing already.

Classic TV is abysmal because of ads

I have to admit that I do not watch a lot of TV or streams. While I tune in to watch movies or shows, this usually happens using streaming services.

I suffer through the rare occasions when I watch classic TV. Maybe it is a game that is only shown there, or something else that is exclusive. The sheer number of ads makes my stomach turn.

Ads at streaming services, including YouTube, may add another dimension to the experience. Most add tracking, which means that you not only lose minutes of your life each hour media is consumed, you are also tracked while suffering.

There is a reason why I prefer buying movies or TV shows on disc when I like them. These do not have ads and I can watch them whenever I want, even when I sit in a cabin in a remote part of Canada.

Closing Words

It is almost certain that an upcoming free Netflix plan will attract lots of users. The exact nature of it is unknown at this point, and it remains to be seen how Netflix plans to release it in the markets it is aiming for.

It could be an interesting option for users who are interested in just a few shows. They could join up and watch these without paying anything. Well, other than with their data and time, that is.

What about you? Would you sign-up for a free Netflix plan, if it would become available in your country?

YouTube

Google announces new YouTube Premium features and hints at new plans

Posted on by Martin Brinkmann

The official way to watch YouTube videos without advertisement is YouTube Premium. The subscription-based service costs $13.99 per month in the United States if you sign up for a regular plan. If you pay annually, that price drops to about $11.66 per month. Students get it for $7.99 and there is also a Family plan for $22.99.

Google has made an announcement on its official support website recently. The company listed new YouTube Premium features and also hinted at the introduction of new plans.

Here are the new features:

  • Jump Ahead feature on mobile to skip ahead. This is done with a double-tap and only available for Android at the time. Apple iOS support is coming “in the future” according to Google.
  • Shorts Picture-in-Picture to watch Shorts while using other apps. Android exclusive.
  • Smart Downloads to download “recommended Shorts automatically” to the device (experimental).
  • Redesigned Watch Patch (experimental).

Most of the features are limited to mobile devices. Furthermore, some of them, especially the redesigned watch patch, are almost universally disliked by the community.

Google hints at new YouTube plans

More interesting than these features is Google’s announcement that it plans to expand “existing offers to more regions” and introduce “new plans” in the future as well.

Could it be that Google finally realized that the price of a YouTube Premium subscription is high if it is just used to watch content without advertisement?

YouTube Premium Lite appears to be a thing still, albeit heavily limited. It dropped the price of a subscription to about $6, but did not remove all ads on YouTube and did not provide access to YouTube Music or downloads.

Closing Words

While there are ways to watch YouTube videos without ads, I have to admit that I would be fine with paying a monthly fee for that. YouTube’s current premium pricing is over my monthly limit though. I do not use the service enough to justify the expense.

If YouTube’s upcoming plan or plans become reality, and if they are below my personal limit, then I’d certainly consider subscribing. In case you are wondering, my limit is $5 per month, preferably less than that if paid yearly.

What about you? Would you pay for YouTube Premium?