OpenVPN Support Forum

Hello,

From what I've seen so far, clients password are stored in the windows registry of their current user.

Is it safe to have it this way ? If any of my users has a virus, can the hacker get back their Windows account ?

We would love to link the password with Windows Hello. So the connection would be more secured and the user would normaly not have to enter any password.

Do you think it is posible ?

Thanks for replies.

The reason to use a password is to force user interaction.

Yes, windows hello force interaction since user has to identify with his footprint.

We just want our VPN to be secured at maximum

For clarity,

are you asking about Openvpn-Connect for Windows

or OpenVPN-Community Edition with the Openvpn-GUI

I am talking about OpenVPN-Community Edition with Openvpn-GUI that we linked with Azure Active Directory. So our users need to authenticate with windows account. We certainly don't want any leak of this password and we would want to be sure that it is secured.

maxence wrote: ↑

Tue Aug 02, 2022 3:42 pm

I am talking about OpenVPN-Community Edition with Openvpn-GUI

I have moved this out of the Openvpn-Connect forum.

maxence wrote: ↑

Tue Aug 02, 2022 3:42 pm

We certainly don't want any leak of this password

Then the correct approach is to force your users to enter the password manually.

Hello,

Thanks for mooving the forum.

Do you know how to force users to enter the password manually ?

Thanks for the help !

When you install Openvpn, there should be a custom option to disable password saving.