[Cyberduck-trac] [Cyberduck] #9096: Remove password saved to keychain
Cyberduck
trac at cyberduck.io
Sun Aug 12 20:33:20 UTC 2018
#9096: Remove password saved to keychain
-------------------------+---------------------------
Reporter: gnotaras | Owner:
Type: enhancement | Status: closed
Priority: normal | Milestone:
Component: core | Version: 4.7.3
Severity: normal | Resolution: worksforme
Keywords: | Architecture:
Platform: Windows 10 |
-------------------------+---------------------------
Comment (by dkocher):
Replying to [comment:7 pschumm]:
> Sorry to add a comment to this closed ticket. IMO, I like the nudge to
save the password in the system keychain, so I have no complaint with
that. Our problem, however, is that we have users who enter an incorrect
passphrase when using key-based authentication, and this passphrase is
then being saved to their keychain. The next time they try to connect, the
stored passphrase is tried, and when it fails, Cyberduck falls back to
password-based authentication which we do not permit on our server. The
user then becomes confused, because it is not obvious what is happening.
>
> This isn't too bad on OS X, but is much more problematic on Windows
since many Windows users do not know how to edit their system keychain.
>
> Is it possible that Cyberduck is saving the passphrase even when it
fails to connect (that is what appears to be happening)? If so, while not
a bug, I would categorize that as misbehavior, and would suggest that it
be changed so that the passphrase (when using key-based authentication) is
only stored if the subsequent connection is successful.
>
> Thanks very much.
In later versions on Windows, passwords are saved in the Credential
Manager. You can view and delete your saved login information in Control
Panel → User Accounts → Credential Manager → Windows Credentials.
--
Ticket URL: <https://trac.cyberduck.io/ticket/9096#comment:8>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows
More information about the Cyberduck-trac
mailing list