Ebay & PayPal logins

Today I visited Ebay. I have an item on order so I clicked on MyEbay to check the order's status. Ebay asked for my login, as always. So I entered my email user name & Ebay automatically filled in my PassWord (PW). First time that ever happened so it startled me.

A few minutes later I bought something & selected PayPal as my payment source. Then Ebay, without asking for my PayPal PW, completed the transaction immediately & showed it as being paid. Again, I was very very startled.

Evidently Ebay knew BOTH PWs -- the one for Ebay & also the one for PayPal. NOT good!

So I changed the PWs for both Ebay & PayPal. I then checked my browser's settings to ensure that neither Ebay nor PayPal were enabled as PWs to be saved by my browser. They were NOT. I then checked my browser to ensure that Ebay & Paypal cookies were NOT in my browser's "keep" list. They were NOT.

If Ebay is retaining those PWs internally, I did not enable Ebay to do so. So HOW did Ebay know both of these PWs? OR did I screw up somehow?

===>Please give me your comments because I am reluctant to again deal with Ebay until I learn more about this situation.

 

What browser?

 

PayPal has recently started giving you the option to remember the login details, so you don't have to login again when you next make a purchase. It could be that you accidentally selected that, the last time you used PayPal.

 

Or maybe is it already selected by default, wherein user has to deselect it if user doesn't want PayPal to remember login credentials.

 

It's not selected by default, you actually have to manually select it.

 

Have you noticed any signs that your account may have been hacked? Changes to your contact information, or address details? Bids, offers, or purchases that you didn’t make? Listings that you didn’t create?

 

I wouldn't put it past an outfit like PP to have that as a default, but you obviously have checked.

 

Yes, I posted about it because I use PayPal a lot and in the last few months, it started giving me the option.

 

I bet that it what has happened, roger_m.

 

I use Iron browser, a chrome clone.

@stapp -- I re-checked the browser's Passwords-to-keep list & it was clean of money-related sites. However, your suggestion did cause me to carefully re-check all of my browser's settings. That helped me find a place where I could make a list of specific sites where NO cookies are ever to be retained. I used that to list ALL sites that I visit whereat money transactions take place.

@roger_m -- I'll bet I did just exactly what you mentioned. When I shop online, I tend to rush pass all the stuff that gets popped-up on my way to the final "DO it" page. I was blissfully unaware that PayPal was even offering this wonderful "convenience" -- so I must have done the dirty deed to my own self.

So -- the passwords are changed and my browser is tightened. Hopefully, the weakest link in my security (namely me) won't get careless again & expose my six to further invasions.

THANKS TO ALL FOR YOUR HELP!!! Wilders is the greatest.

 

Thanks for the heads up @bellgamin.

I`ll be on ebay this week and will keep an eye out for pre-ticked boxes and such like as like you I tend to rush through to the payment page.

I always enjoy reading your posts.

Regards Eck

 

Additionally, both Ebay and Paypal offer and I use 2FA via SMS. By enabling SMS authentication you CANNOT login without providing the code sent to your phone. I wish they offered true U2F two factor but neither does. SMS is light years ahead of simply a password. Just a suggestion.


Sounds like you addressed your browser settings. I make sure that all history is deleted when I leave my session.

 

Me too. We probably visit some of the same websites.