Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Passwords stored in clear text #178

Open
szapp opened this issue Aug 11, 2023 · 0 comments
Open

Passwords stored in clear text #178

szapp opened this issue Aug 11, 2023 · 0 comments

Comments

@szapp
Copy link

szapp commented Aug 11, 2023

To my surprise I found that my credentials are stored in clear text in %AppData%\g-node\WinGIN\UserCredentials.json!

Although - in an ideal case - no one should have access to my personal folder, I don't think that's very secure. Especially since the web interface even offers measures like TFA.

Would it be possible to use more secure methods, like the Windows Credential Manager?

Alternatively, and as a quick workaround, would it be possible to offer a setting to not store my password but to prompt for it (at the cost of no background updates)? I'd rather abstain from using the WinGIN until there is a solution.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant