[Cyberduck-trac] [Cyberduck] #9096: Remove password saved to keychain

Cyberduck trac at cyberduck.io
Sun Aug 12 20:33:20 UTC 2018


#9096: Remove password saved to keychain
-------------------------+---------------------------
 Reporter:  gnotaras     |         Owner:
     Type:  enhancement  |        Status:  closed
 Priority:  normal       |     Milestone:
Component:  core         |       Version:  4.7.3
 Severity:  normal       |    Resolution:  worksforme
 Keywords:               |  Architecture:
 Platform:  Windows 10   |
-------------------------+---------------------------

Comment (by dkocher):

 Replying to [comment:7 pschumm]:
 > Sorry to add a comment to this closed ticket. IMO, I like the nudge to
 save the password in the system keychain, so I have no complaint with
 that. Our problem, however, is that we have users who enter an incorrect
 passphrase when using key-based authentication, and this passphrase is
 then being saved to their keychain. The next time they try to connect, the
 stored passphrase is tried, and when it fails, Cyberduck falls back to
 password-based authentication which we do not permit on our server. The
 user then becomes confused, because it is not obvious what is happening.
 >
 > This isn't too bad on OS X, but is much more problematic on Windows
 since many Windows users do not know how to edit their system keychain.
 >
 > Is it possible that Cyberduck is saving the passphrase even when it
 fails to connect (that is what appears to be happening)?  If so, while not
 a bug, I would categorize that as misbehavior, and would suggest that it
 be changed so that the passphrase (when using key-based authentication) is
 only stored if the subsequent connection is successful.
 >
 > Thanks very much.

 In later versions on Windows, passwords are saved in the Credential
 Manager. You can view and delete your saved login information in Control
 Panel → User Accounts → Credential Manager → Windows Credentials.

--
Ticket URL: <https://trac.cyberduck.io/ticket/9096#comment:8>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list