SECURITY - PASSWORDS - 28.03.2013

Protect yourself against keyloggers

Keylogger

What is a keylogger? It’s a tiny program which surreptitiously runs in the background and is therefore very hard to detect. The tool can intercept any keystroke on your keyboard. In other words: anything you type (including sensitive information such as passwords or credit card numbers you enter) is saved in a log file which is subsequently sent to its developer, typically via e-mail, by the keylogger.

Who installs keyloggers?

Keyloggers typically invade computers as components of malware that users downloaded inadvertently. The aim of a keylogger is obviously to obtain sensitive information. However, there are also keyloggers which are installed deliberately, e.g. by parents, to monitor other people’s activities, e.g. their children’s, on their computer. These tools not only log all keystrokes but also make screenshots at regular intervals. An example of such a tool is the Free Keylogger (http://www.iwantsoft.com/free-keylogger.htm).

What can you do against keyloggers?

The best option is to prevent a keylogger from being installed on your computer. This means that you should install an anti-malware program. Indeed, such programs can also trace keylog­gers on your computer and remove them. Make sure that your operating system and software (especially your browser) are always up to date. Activate a firewall (e.g. the firewall integrated in Windows), as it will warn you when an unknown program is trying to send data to the outside world. To prevent passwords from being intercepted even after you’ve installed these tools, install a password manager such as LastPass (https://lastpass.com). This tool will complete your passwords automatically so you no longer have to type them.

For extra protection against keyloggers, install a dedicated anti-keylogger tool such as Zemana AntiLogger Free (http://zemana.com/product/antilogger-free/overview). It protects your keystrokes by encrypting them. The paid for version, SpyShelter Stop-Logger (http://spyshelter.com/description - €24.95 or £21.60) goes even further and protects you against screenshots or your clipboard being copied. Tip. For a comparison of different anti-keylogger tools, check out: http://anti-keylogger-software-review.toptenreviews.com.

Typing passwords

There are two futher ways of protecting yourself:

1. Whenever you need to type a password, type two or three random characters first, select them using the mouse and then overtype your real password, deleting the other characters. The keylogger will think that these two or three characters constitute the beginning of your password and are part of it.
2. In Windows, you can also use the built-in On Screen Keyboard tool (OSK). Click on the Windows Start button and type “osk” in the search field. A screen keyboard will appear in which you can use the mouse for “typing”. As you’re not using your actual keyboard, the keylogger can’t intercept anything.