Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Enhancement] More secure storage of passwords #28

Closed
RMerl opened this issue Jun 20, 2020 · 5 comments
Closed

[Enhancement] More secure storage of passwords #28

RMerl opened this issue Jun 20, 2020 · 5 comments
Labels
enhancement New feature or request

Comments

@RMerl
Copy link

RMerl commented Jun 20, 2020

Currently, the password is stored in plain text in a json file, which is a show stopper for anyone worried about security. Please consider possibly leveraging Windows's protected storage, or some other form of more secure password storage method.

Another alternative could be to allow leaving the Password field empty, and requesting it at connection time, and not storing it on disk afterward. Not as convenient, but may be a simpler alternative.

@evsar3 evsar3 added the enhancement New feature or request label Jun 22, 2020
@kpiq
Copy link

kpiq commented Aug 20, 2020

Where is that json file? I am unable to edit one of the connections I made. An animated "loading" icon shows up where the Edit pencil should show up, but now I'm worried about leaving behind files with my password on them, encryped or not. Uninstalling and reinstalling didn't erase the connection.

@kpiq
Copy link

kpiq commented Aug 20, 2020

I want to manually delete any trace of this file.

@evsar3
Copy link
Owner

evsar3 commented Aug 20, 2020

@kpiq see issue #9

@evsar3
Copy link
Owner

evsar3 commented Aug 26, 2020

I'm gonna implement the possibility to ask for the password on connect without storing it anywhere, also, looking for more information on how to use third party key management programs.

@evsar3
Copy link
Owner

evsar3 commented Aug 26, 2020

Resource for asking for the password is finished and should be shipped in beta.2 at weekend.

@evsar3 evsar3 closed this as completed Sep 3, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants