The Security Vulnerability of URL Credentials
Saving URLs containing basic auth patterns (https://user:password@example.com) or session tokens (?token=xyz) exposes your credentials in plain text across browser history, server access logs, and unencrypted local bookmark databases.
Best Practice: Decoupling Links from Authentication
Always save clean destination URLs in your bookmark manager and rely on specialized password managers (such as 1Password or Bitwarden) for credentials. This keeps your bookmark collections safe to share and free of sensitive access keys.
Related Questions
将密码、Token凭证直接保存在书签网址（URL）中安全吗？
绝对不安全。URL中的密码会以明文形式暴露在日志与本地文件中，账号密码应交由专业密码管理器独立保管。
What is Marqly Pro?
Marqly Pro includes unlimited bookmarks, semantic AI search, automated summaries, and web highlighting across all devices.
