# Using Security and Privacy Features

[intro text].

In this section: Using the Cookie Manager Using the Password Manager Using the Form Manager Encrypting Stored Sensitive Information

# Using the Cookie Manager

A cookie is a small amount of information used by some web sites. A web site that sets cookies will ask your browser to place one or more cookies on your hard disk when you visit the site. Later, when you return to the site, your browser sends back the cookies that belong to the site.

Before loading a web page that uses cookies, your browser handles the page's cookies by doing two things:

- Accepts or rejects any requests by the web site to set (store) one or more cookies on your computer.
- Accepts or rejects any requests by the web site to read cookies it previously stored on your computer. A web site can't actually read cookies or any other data on your computer---instead, your browser gets the cookies and sends them back to the web site.

In this section: Specifying How Your Browser Should Handle Cookies Mananging Cookies Site-By-Site Viewing Cookies Removing Cookies

## Specifying How Your Browser Should Handle Cookies

Your browser lets you specify how cookies should be handled, by setting your cookie preferences and by using the Cookie Manager.

1. Open the Edit menu and choose Preferences.
2. Under the Advanced category, choose Cookies. (If not options are visible in this category, click to expand the list.)
3. Click one of the radio buttons:
   - Enable all cookies: Choose this to permit all web sites to set cookies on your computer and receive them back during subsequent visits. Note: If you choose this option, and later choose to reject all cookies, you may still have some older cookies stored on your computer (though no new ones will be set).
   - Enable cookies for the originating web site only: Foreign cookies are not accepted or returned. Cookies received through email (when the message contains a web page) are treated as foreign cookies.
   - Disable all cookies: Choose this to refuse all cookies.
4. If you want to be notified when a web site tries to set a cookie, select "Warn me before accepting a cookie."

## Mananging Cookies Site-By-Site

If you select "Warn me before accepting a cookie" in the Cookie Preferences (see Step 4 above), Cookie Manager lets you control cookies on a site-by-site basis.

When you are warned that a web site is requesting to set a cookie, you can click Yes to allow or No to deny the cookie. You can also select the option for your browser to "Remember this decision."

If you select "Remember this decision," you will not be warned the next time that site tries to set or modify a cookie, and your "yes" or "no" response will still be in effect.

If you wish to change a remembered response later, use Cookie Manager as follows:

1. Open the Tasks menu, choose Privacy and Security, and then choose Cookie Manager.
2. Click the Cookies Site tab.
3. The web sites for which you have allowed or denied cookies are listed. Removing a site from the list resets its status, so the next time you visit that site you will be warned if the site attempts to set a cookie.

Another way to control cookies site-by-site is to use the Allow and Block menu options.

1. Open the Tasks menu, choose Privacy and Security, and then choose Cookie Manager.
2. Choose "Allow cookies from this site," or "Block cookies from this site."

## Viewing Cookies

You can use the Cookie Manager to view detailed information about cookies.

1. Open the Tasks menu, choose Privacy and Security, and then choose Cookie Manager.
2. Select View Stored Cookies from the submenu. The Cookie Manager window opens with a list of all the cookies stored on your computer.
3. To see details for a particular cookie, click it. The table below explains the information you see.

Item | Explanation
Cookie Name | This is the name assigned to the cookie by its originater.
Information | This string of characters is the information a web site tracks for you. It might contain a user key or name by which you are identified to the web site, information about your interests, and so forth.
Host or Domain | This item tells you whether the cookie is a host cookie or a domain cookie. A host cookie is sent back, during subsequent visits, only to the server that set it. A server is a computer on the Internet. A web site resides on one or more servers. A domain cookie is sent back to any site that's in the same domain as the site that set it. A site's domain is the part of its URL that contains the name of an organization, business, or school---such as netscape.com or washington.org.
Path | This is the file pathway. If a cookie comes from a particular part of a web site, instead of the main page, a path is given.
Secure Server | This lists whether the cookie was sent over a secure server. If a cookie is secure, it will only be sent over a secure (https) connection. Before sending a secure cookie, your browser checks the connection and will not send if the connection is not secure.
Expires | This is the date and time at which the cookie is de-activated. The browser regularly removes expired cookies from your computer.

## Removing Cookies

Important: To remove cookies, follow the steps in this section. Do not try to edit the cookies file on your computer.

To remove one or more cookies from your computer:

1. Open the Tasks menu, choose Privacy and Security, and then choose Cookie Manager.
2. Click the Stored Cookies tab.
3. Select one or more cookies and click Remove, or click Remove All Cookies.

You can also choose to prevent the removed cookies from being re-accepted later.

[ Return to beginning of section ]

# Using the Password Manager

Many web sites require you to type a user name and password before you can enter the site. For instance, personalized pages and web sites containing your financial information require you to log in.

The user name and password you use at a particular site can be read by the site's administrator. If this concerns you, you may wish to use a different password at every site with which you register. Unfortunately, it is very difficult to remember every single password you've ever used.

Password Manager can help you by storing your user names and passwords on your computer's hard disk, and entering them for you automatically when you visit such sites.

In this section: Using Password Manager to Remember User Names and Passwords Entering User Names and Passwords Automatically Turning Password Manager On and Off Viewing and Managing Stored Passwords

## Using Password Manager to Remember User Names and Passwords

When you enter your user name and password at a web site a dialog box appears asking, "Do you want Password Manager to remember this logon?" You can choose the following options:

- Yes. The next time you return to the web site you'll see that your user name and password are already filled in.
- No. Password Manager won't remember the user name and password, but will ask again the next time you visit the site.
- Never for this site. Password Manager will not ask in the future if you want to save your user name and password for that site.

Password Manager saves your user names and passwords on your own computer in a file that's difficult, but not impossible, for an intruder to read. See Encrypting Stored Sensitive Information for information on protecting your stored user names and passwords with encryption technology.

## Entering User Names and Passwords Automatically

If you use Password Manager to remember your user name and password for a web site, then the next time you visit the site Password Manager will automatically fill in your user name and password on the site's log in screen.

## Turning Password Manager On and Off

Password Manager is on by default. To turn it off:

1. Open the Edit menu and choose Preferences.
2. From the Advanced category, choose Passwords. (If no options are visible in this category, click to expand the list.)
3. In the Password Manager section, deselect "Remember passwords for sites that require me to log in" to turn Password Manager off.

## Viewing and Managing Stored Passwords

To see a list of the user names and passwords you have stored:

- Open the Tasks menu, choose Privacy and Security, and then choose Password Manager.
- Select Viewed Stored Passwords from the submenu. You see the Password Manager.
- Click the Passwords Saved tab. You see a list of all the stored user names. (Passwords are not listed.) To remove a user name, click it and then click Remove. The next time you visit the web site, you will be asked to enter your password.
- Click the Passwords Never Saved tab to see a list of the web sites for which you instructed Password Manager never to store user names. To remove a web site from this list, click it and then click Remove. The next time you visit the web site, you will be asked if you want Password Manager to saved the user name and password for that site.

[ Return to beginning of section ]

# Using the Form Manager

Many web pages contain forms for you to fill out---order forms for online shopping, information databases, and so forth.

Form Manager can save the personal data you need to enter when you fill out a form, by storing such information as name, address, phone, credit card numbers, and so forth. Then, when a web site presents you with a form, Form Manager can fill it out automatically.

In this section: Saving Information From Forms Filling Out Forms Automatically Form Manager's Automatic Notification Feature What Happens If I Provide Personal Information to a Web Site?

## Saving Information From Forms

When you fill out an online form, Form Manager normally detects the form and gives you an opportunity to save the personal data you entered into the form. Soon, Form Manager will have enough data to begin filling out forms automatically.

There are two ways to save personal data:

- Each time you submit an online form that you've filled out, Form Manager asks if you want the information saved. Click Yes. (Note: Form Manager prompts you only if its automatic notification feature is turned on.)
- After you fill out a form (but before you submit it), open the Edit menu and choose Save Form Data. You can use the Interview form for this purpose:
  1. Open the Tasks menu, choose Privacy and Security, and then choose Form Manager.
  2. Select Interview from the submenu.
  3. Fill out as many fields as you want.
  4. When you're finished with the Interview form, open the Edit menu and choose Save Form Data.

Form Manager stores your personal data on your own computer in a file that's difficult, but not impossible, for an intruder to read. See Encrypting Stored Sensitive Information for information on protecting your information with encryption technology.

## Filling Out Forms Automatically

To fill out an online form automatically:

1. Go to the online form you want to fill out.
2. Open the Edit menu and choose Prefill Form.

## Form Manager's Automatic Notification Feature

Form Manager is set to prompt you to save information whenever it detects that you have filled out an online form. If you don't want to see these prompts, do this:

1. Open the Edit menu and choose Preferences.
2. Under the Advanced category, choose Forms. (If no options are visible in this category, click to expand the list.)
3. In the Form Manager section, deselect "Save form data from web pages when completing forms."

## What Happens If I Provide Personal Information to a Web Site?

If you provide personal information such as your name, phone number, email address, and so forth, the web site is free to store that information in its database and use it later. A web site might use this information to improve its service to you or target advertising to your interests. A web site could sell the information it has gathered to other companies.

One way to find out how a web site uses the information it gathers is to check its privacy policy.

Before providing personal information on an online form, you must decide whether or not you trust the company---just as you judge whether or not you trust a catalog company before you provide your credit card number on the company's order form.

[ Return to beginning of section ]

# Encrypting Stored Sensitive Information

If you use Password Manager or Form Manager to save passwords and personal data, then this sensitive information is stored on your computer in a file that's difficult, but not impossible, for an intruder to read.

If you are not concerned about unauthorized use of your computer, you may not need further security. However, if your computer is in an area where unauthorized people have access to it, it's possible for a determined person to read the file containing your sensitive information.

For a greater degree of security, you may want to protect the file with encryption. Encryption makes it nearly impossible for an unauthorized person to view your stored sensitive information.

In this section: Encrypting Stored Sensitive Information Setting a Personal Security Password Changing Your Personal Security Password Logging Out of Your Personal Security Password What to Do If You Forget Your Personal Security Password

## Encrypting Stored Sensitive Information

To choose encryption:

1. Open the Edit menu and choose Preferences.
2. Under the Advanced category, choose Passwords.
3. In the Encrypting versus Obscuring section, select "Use encryption when storing sensitive data." Remove the checkmark to turn encryption off.
4. Click OK. A new dialog box appears and leads you through the process of choosing a Personal Security password.

## Setting a Personal Security Password

If you choose encryption, you'll need a Personal Security Password. You can set your Personal Security Password by using the Personal Security Manager. With encryption selected, you'll be asked for your Personal Security Password at least once during a Netscape 6 session in which you access any of your stored sensitive information.

If you choose encryption, but don't already have a Personal Security Password, you'll be prompted to create one the first time you try to save or retrieve your sensitive information.

## Changing Your Personal Security Password

1. Open the Tasks menu, choose Privacy and Security, and then choose Password Manager.
2. Select Change Personal Security Password from the submenu. You see the Personal Security Manager.
3. Enter your current Personal Security Password and click OK.
4. Enter your new Personal Security Password, and retype it to confirm the spelling.

## Logging Out of Your Personal Security Password

Normally, you are asked for your Personal Security Password once during each Netscape 6 session in which you access any of your stored sensitive information. However, you can log out of your Personal Security Password so that it must be entered again before any sensitive information can be stored or retreived. This is useful if you are going to leave your computer unattended for a period of time.

To log out of your Personal Security Password:

1. Open the Tasks menu, choose Privacy and Security, and then choose Password Manager.
2. Select Log Out from the submenu.

## What to Do If You Forget Your Personal Security Password

If you forget your Personal Security Password, you may have to reset it. In this case, you will need to clear all the sensitive information stored by Password Manager and Form Manager, because without your original Personal Security Password you will not be permitted to use the information.

To reset your Personal Security password:

1. Open the Tasks menu, choose Privacy and Security, and then choose Security Manager.
2. The Personal Security Manager window appears. Click the Help button to read about what to do when you forget your Personal Security Password.

To clear all stored passwords and other sensitive information:

- Open the Tasks menu, choose Privacy and Security, and then choose Password Manager.
- Select Clear Sensitive Information from the submenu.

After you clear the saved personal information, you must remember all the user names and passwords Password Manager had stored for you, so you can enter them when you visit the web sites that require them.

[ Return to beginning of section ]

10/6/00

Copyright © 1994-2000 Netscape Communications Corporation.