[Closed] Strava "Remember me" button.

Doing my head in. Especially as I use complex long unrememberable passwords for each site and have to look them up individually.

Not going to link my account to Facebook or Google for sign-in either.

I though Garmin Connect was bad for this, but at least it remembers you for a bit.

LastPass is your friend

What browser do you use? Chrome and Firefox offer to remember my passwords for each site.

I get logged out of Strava maybe every six weeks to two months. Home page comes up, I click in the username box and Chrome autofills that and the password.

LastPass is your friend

Chrome and Firefox offer to remember my passwords for each site.

I don't trust third party tools that remember all my passwords and likewise any extensions or features in browsers that auto-fill passwords.

I turn off all that stuff. One vulnerability and get hacked, all passwords stolen.

I store all of mine in my tinfoil helmet

I don’t trust third party tools that remember all my passwords and likewise any extensions or features in browsers that auto-fill passwords.

I turn off all that stuff. One vulnerability and get hacked, all passwords stolen.

The alternative is either much simpler passwords or a relatively complex password but used for multiple sites (because it's difficult to remember hundreds of genuinely complex passwords). Using a single password across multiple sites is probably the worst because the username/password breach is more likely to come from a site anyway - check the breaches on haveibeenpwned to see where data loss actually happens.

Horses for courses anyway - from a risk exposure perspective each has different concerns. LastPass has a relatively good record for data protection and disclosure of issues, compared to some.

There's a few alternatives to Lastpass.

I've moved to KeePassXC. The password database is stored locally rather than the cloud, and you can also have a key file stored seperately as additional security as well as the master password. There's various locking options to lock the password database when you lock your screen or after inactivty, minimize window etc.

Also tried BitWarden - store's your password database in the cloud of your choice (ie Google drive) so you have control of it, can delete it etc, etc.

@deadkenny - for sites like Strava it's not such a big deal but for online banking and similar I don't use it.

The "use FB or Google" to log in is simply using a strong form of authentication rather than linking to your account. It's a bit like a better version of getting your doctor to sign the back of your passport photo as verifying who you say you are.

It's not remembering the password that is the problem. My name and password are automatically filled in for me. It's just that Strava won't remember these and I have to hit the log in button.

The problem is not remembering
my details, but Strava remembering them. It used to but the hipsters on the West Coast have "improved our experience".

Strange that Strava remember me but not you. Maybe I'm "special" 😏

What's the timescale on this - every visit, every day? Have you blocked cookies or something similar? Have you raised a ticket with Strava or looked on their user forums? Does seem odd.

Being logged in permanently is a security risk so most sites time limit it in some way. As an example this site is based on Wordpress which defaults to 48hrs logged in unless you check the "remember me" box when it becomes 14 days.

Strava hasn't remembered me since I signed up in 2013,on any computer.

Strange that Strava remember me but not you. Maybe I’m “special”

I thought it was a Strava/Chrome compatability issue? Something in Chrome changed and Strava need to rework something.

I am permanently logged in on my phone, but every time I leave Strava on my PC I am logged out.
Using Firefox on PC, not Chrome.

Not sure about that Colin. I'm using Chrome and it's fine for me. It must have come into contact with Drac's Ipad!

@Sarawak - so it must be a setting on the browser on your PC. If you use another browser does it work OK then?

Hmm. Mine used to be OK but I'm no longer offered a "remember me" box on the Strava login page. I recently did a total reinstall (from the OS up) so maybe some legacy cookie (or something)  went AWOL in the process.

@whitestone, don't think it's anything to do with the browser. The remember me button has been removed from the Strava log in page.

Someone, on here I think, has mailed Strava some weeks ago when this first happened. The reply was along the lines of "we are working on it". Bit like our local council and pothole repairs.

OK, interesting.

Chrome: Log in to Strava; shut tab down; shut browser down; start browser; go back to Strava => I'm still logged in.

Firefox: Log in to Strava; shut tab down; shut browser down; start browser; go back to Strava => have to log in.

I'm on a Mac running Yosemite.

I don't have to shut the browser down. I don't log out of Strava,just close Strava and I'm logged out.
Before the button went AWOL I remained logged in. My details are remembered by the PC,but Strava isn't picking them up

The app works fine, but if I log on via the browser on my phone that too is missing the remember me button.

App works fine for me, but website on tablet I have to log in every time. Chrome fills in my details though so it's not a problem.

If it is s big problem, just change your password to strava1 or something. Hardly matters if your Strava account gets hacked. Does it!!?

The alternative is either much simpler passwords or a relatively complex password but used for multiple sites (because it’s difficult to remember hundreds of genuinely complex passwords)

Neither. The one in brackets. Hundreds of different complex passwords. Also, different email address for every site, not just for anti-spam but because emails and passwords are often hashed together for credential storage and same email can provide clues or worse if same password is used.

Write them down on a bit of paper. It's far more secure.

Actually this is advised now or accepted as okay practice by banks and others. Reason simply being because it's extremely unlikely you'll get someone break in to your house and pinch that bit of paper. It's far more likely you'll get your PC hacked, use weak passwords, use the same password on every site, etc.

Alternatively, digital bit of paper you can access somewhere secure, but make it very secure and obscure. Using a standard app to do it and it might store them in the cloud is a target. Something very obscure no one or no bot is looking for, then better. Though the paper is more secure, but more tricky if you need a password for a particular site and you're not at home.