An OpenID eliminates the need for multiple usernames across different websites. With this, one need not remember different usernames and passwords while using different websites. That is the good news. The flip side is that one OpenID lost means all other accounts lost, says ethical hacker Rohit Srivastwa, who is also the founder of ClubHack, which had organised India’s first international convention of hackers in Pune in December last year.

“Knowing the OpenID password will enable cyber criminals to access all other accounts of the user. So OpenIDs are likely to be the hot targets of cyber criminals,” he said.

Srivastwa said that Google has started providing OpenIDs from January 9 and Yahoo from January 30. There are several other websites that provide OpenIDs, but Google and Yahoo being more popular, there entering the arena would give a major boost to the OpenID culture.

Currently there are about 10, 000 websites that support OpenID logins and there would more in future. The OpenIDs are provided free of cost. An OpenID also reduces the cost of password and account management during online business. Given all this and with growing web traffic, it is estimated that more and more internet users would prefer using the OpenIDs for simplifying their online work.

Srivastwa has asked people to use OpenIDs, but with care. “Lack of cautiousness might cause severe loss,” he said and added, “OpenIDs could be stolen through cookie thefts and other cyber attacks like phising.”

“A cookie is a file that is sent to the user while browsing a website. The file is stored on the hard drive and contains vital information that can be used for identifying the passwords. So cookie theft could be a favourite attack of cyber criminals for stealing the OpenIDs,” he said.