Privacy & trust
Is it safe to store passwords or credentials in bookmark URLs?
No. Storing authentication tokens or credentials in bookmark URLs is dangerous; use a dedicated password manager instead.
Last updated:
The Security Vulnerability of URL Credentials
Saving URLs containing basic auth patterns (https://user:password@example.com) or session tokens (?token=xyz) exposes your credentials in plain text across browser history, server access logs, and unencrypted local bookmark databases.
Best Practice: Decoupling Links from Authentication
Always save clean destination URLs in your bookmark manager and rely on specialized password managers (such as 1Password or Bitwarden) for credentials. This keeps your bookmark collections safe to share and free of sensitive access keys.
