Password security on Ovpn community

maxence

Hello,

From what I've seen so far, clients password are stored in the windows registry of their current user.

Is it safe to have it this way ? If any of my users has a virus, can the hacker get back their Windows account ?

We would love to link the password with Windows Hello. So the connection would be more secured and the user would normaly not have to enter any password.

Do you think it is posible ?

Thanks for replies.

TinCanTech

The reason to use a password is to force user interaction.

maxence

Yes, windows hello force interaction since user has to identify with his footprint.

We just want our VPN to be secured at maximum 🙂

TinCanTech

For clarity,

are you asking about Openvpn-Connect for Windows

or OpenVPN-Community Edition with the Openvpn-GUI

:?:

maxence

I am talking about OpenVPN-Community Edition with Openvpn-GUI that we linked with Azure Active Directory. So our users need to authenticate with windows account. We certainly don't want any leak of this password and we would want to be sure that it is secured.

TinCanTech

maxence wrote I am talking about OpenVPN-Community Edition with Openvpn-GUI

I have moved this out of the Openvpn-Connect forum.

maxence wrote We certainly don't want any leak of this password

Then the correct approach is to force your users to enter the password manually.

maxence

Hello,

Thanks for mooving the forum.

Do you know how to force users to enter the password manually ?

Thanks for the help !

TinCanTech

When you install Openvpn, there should be a custom option to disable password saving.