Technology in terms you understand. Sign up for the Confident Computing newsletter for weekly solutions to make your life easier. Click here and get The Ask Leo! Guide to Staying Safe on the Internet — FREE Edition as my thank you for subscribing!

Is it possible for a hacker to get my Hotmail password without access to my computer?

Question:

Is it possible for a hacker to get my Hotmail password without
access to my computer?

Yes.

There are several ways a hacker can get your password. The good news
is that there is something you can do to prevent that from happening.

The bad news is that most people don’t.

Become a Patron of Ask Leo! and go ad-free!

The hacker could guess it.

I’d venture a guess that the most common form of account theft and
password hacking is simply being able to guess your password. I’d go
even further to say that this is perhaps the most common among
children.

Yes, having a password that’s easy to guess is at odds with being
able to remember it yourself. To put it bluntly: too bad. You need to
come up with an approach that you can remember and that no one
would ever be able to guess.

What’s a good password?
discusses this in some more detail.

The hacker could have found your notepad.

“… keeping it written down anywhere in, on or
around your desk, workstation or computer is just asking for
trouble.”

Do you write your password down on paper somewhere?

Don’t.

It’s just another way that someone could stumble upon it and then
use it to access your account.

In particular, keeping it written down anywhere in, on or
around your desk, workstation or computer is just asking for trouble.
Use a password method that you can remember, something that you don’t
have to write down.

You could have told the hacker.

You may think I’m joking, but I’m not.

Have you ever shared your password with anyone?

ANYONE?

I honestly don’t care if that other person is someone you really,
really trust. Boyfriend, girlfriend, trusted colleague, “BFF” … it
doesn’t matter. You’ve just given your password to someone else.

Yes, they could be the hacker, I suppose, and that does happen –
often. But even more frequent is that they inadvertently share your
password with someone else. Someone else that you don’t trust, and that
someone else becomes your hacker.

I’d also guess that this is also one of the more common reasons for
account theft and hacking among children.

You could have told the hacker, again.

There are many ways that hackers try to get your password. The one
we’re most familiar with is the phishing scam. Email that looks
like
it’s real, email that asks you to go somewhere that also
looks like it’s real, where you’re instructed to enter your
account ID and password.

The only problem is that it wasn’t real. It was a hacker attempting
to collect your account information.

Similarly, there are services out there that add functionality to
Hotmail – perhaps a POP3 connector, or a social media site wanting to
import your contacts. But to do so they need your account ID and
password. By giving them that information you’re assuming that they are
trustworthy. Many are. Many are not.

You could have told the world!

Ever use an open WiFi hotspot?

This is less likely, since Hotmail’s default login is, in fact,
secure, and your password should not be visible to WiFi sniffers
nearby.

On the other hand, if you use one of the POP3/SMTP connectors for
Hotmail, it’s unclear whether your password is transmitted in the
clear. If it is, it’s there for anyone nearby to see.

It might not have been Hotmail

Recall that most people use their Hotmail ID for Windows Live
Messenger, and a number of Windows Live and MSN services. For example
you might have given someone your MSN Messenger password, not realizing
that’s exactly the same as giving them your Hotmail password, because
it’s the same account.

The hacker might have access to your computer.

I know you excluded this in your question, but I have to include it.
The hack could get your password via spyware installed on your machine.
That spyware could be recording everything you do, just account ID’s
and passwords, or anything in between. That collected data is then sent
off to the hacker.

It’s one of the biggest reasons I so strongly recommend taking all
the steps necessary to keep your computer safe.

The bottom line is that it is all in your control.

Do this

Subscribe to Confident Computing! Less frustration and more confidence, solutions, answers, and tips in your inbox every week.

I'll see you there!

15 comments on “Is it possible for a hacker to get my Hotmail password without access to my computer?”

  1. good article leo , i want to add that some users didn’t care about their antivirus or internet security software and others uses any security software without care about it’s effectiveness and this is the calamity , hackers is not a god but they are intelligent programmers which analyze systems to reach the weakest point and try to enter from this point , so if you close these point carefully , you hadn’t to afraid about hackers any more.

    thanks leo
    http://www.seo123.ws

    Reply
  2. I have AOL and whenever I make new snames, some guy in the room seems to know who is behind those snames. I have no idea how he does it, I have never shared my account with any1.
    I think he sniffs out my IP address and then back track to see where I am logged on from.

    Reply
  3. Someone demonstrated recently that in fact if you save your password in Windows Live Messenger (certainly on Windows XP, not sure about Vista) the password can be easily found by simple software that reveals the contents of the Windows Password Stores. Same is true for browsers: Internet Explorer, Firefox and Opera. I know Firefox can be protected by a master password but by default it’s not so anyone who can access your browsers’ profile location has access to all password’s you’ve saved in it as well.

    Reply
  4. Paswords, Passwords, I’m swmming in passwards. I’m at that age (Senior) that can’t remember all the passwords so I Have to Write Them Down. Just about every web sight I want to use, I have to figure out a password. I counted them and have 15 different passwords! Is there a simpler way? Thanks, Doug!

    Reply
  5. I, too, use Roboform and save the passwords only to a secure jump drive. When I am not at the PC, nether are the PWs. Does using Window Washer after each session on the PC help to keep the PW’s safe, too?

    Reply
  6. —–BEGIN PGP SIGNED MESSAGE—–
    Hash: SHA1

    I don’t have any direct experience with Kaspersky, but have
    heard only good things.

    Leo

    —–BEGIN PGP SIGNATURE—–
    Version: GnuPG v1.4.7 (MingW32)

    iD8DBQFIZmvKCMEe9B/8oqERAjxQAKCO0mM4u9cfFKt1wuW73TNLUJjLwwCfY9FV
    eJ7u+0gwwlXFH3noT7dYfYs=
    =aIoz
    —–END PGP SIGNATURE—–

    Reply
  7. Well leo, i have recently faced it two times that some one hacked Yahoo or MSN ID. I have given the detail in my blog http://wisdomtalks.com/hacking-yahoo-or-hotmail-is-it-possible/
    I would not have believe it, if i donot face it myself.
    I am using strong Password as well all other measures being suggested by MSN. And i really donot understand how this guy is hacking.

    Of course hacking is possible. There are many ways – everything from keyloggers to spyware, to password guessing, WiFi sniffing, to trusting an internet connection such as an open WiFi or hotel connection that you shouldn’t. If you’re getting hacked repeatedly, then there’s some aspect of basic internet security that you’re missing.

    – Leo
    02-Jan-2009
    Reply
  8. Actually LEO Hotmail is the most unsecure program on the net. Because of the fact hotmail now has this credential recovery program anyone can access your account. You go the the revert link and all you need to get correct is their birthdate and their ip and that’s it. You now have ownership of their e-mail. And they can get your ip using a tool called IP Get. All you have to do is change your display picture and the hacker has your ip.

    Reply
  9. I was wondering what percentage of Questions you get are on Hotmail(I no longer have Hotmail for years).

    I don’t have a percentage, but I can tell you that it’s very high compared to other mail services, and high overall.

    Leo
    17-Jun-2011

    Reply
  10. I do not have roboform, but just Googled it. Imagine the horror of a hacker getting your master password. He would not only have access to one of your accounts, but ALL of them.

    Reply

Leave a reply:

Before commenting please:

  • Read the article.
  • Comment on the article.
  • No personal information.
  • No spam.

Comments violating those rules will be removed. Comments that don't add value will be removed, including off-topic or content-free comments, or comments that look even a little bit like spam. All comments containing links and certain keywords will be moderated before publication.

I want comments to be valuable for everyone, including those who come later and take the time to read.