Password security on Ovpn community

This is the forum to post your config. Include diagrams, usage graphs, and all the other goodies to show off your network.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
maxence
OpenVpn Newbie
Posts: 7
Joined: Mon Aug 01, 2022 3:59 pm

Password security on Ovpn community

Post by maxence » Mon Aug 01, 2022 4:05 pm

Hello,

From what I've seen so far, clients password are stored in the windows registry of their current user.

Is it safe to have it this way ? If any of my users has a virus, can the hacker get back their Windows account ?

We would love to link the password with Windows Hello. So the connection would be more secured and the user would normaly not have to enter any password.

Do you think it is posible ?

Thanks for replies.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Password security on Ovpn community

Post by TinCanTech » Mon Aug 01, 2022 5:55 pm

The reason to use a password is to force user interaction.

maxence
OpenVpn Newbie
Posts: 7
Joined: Mon Aug 01, 2022 3:59 pm

Re: Password security on Ovpn community

Post by maxence » Tue Aug 02, 2022 8:10 am

Yes, windows hello force interaction since user has to identify with his footprint.

We just want our VPN to be secured at maximum :)

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Password security on Ovpn community

Post by TinCanTech » Tue Aug 02, 2022 11:41 am

For clarity,

are you asking about Openvpn-Connect for Windows

or OpenVPN-Community Edition with the Openvpn-GUI

:?:

maxence
OpenVpn Newbie
Posts: 7
Joined: Mon Aug 01, 2022 3:59 pm

Re: Password security on Ovpn community

Post by maxence » Tue Aug 02, 2022 3:42 pm

I am talking about OpenVPN-Community Edition with Openvpn-GUI that we linked with Azure Active Directory. So our users need to authenticate with windows account. We certainly don't want any leak of this password and we would want to be sure that it is secured.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Password security on Ovpn community

Post by TinCanTech » Tue Aug 02, 2022 5:01 pm

maxence wrote:
Tue Aug 02, 2022 3:42 pm
I am talking about OpenVPN-Community Edition with Openvpn-GUI
I have moved this out of the Openvpn-Connect forum.
maxence wrote:
Tue Aug 02, 2022 3:42 pm
We certainly don't want any leak of this password
Then the correct approach is to force your users to enter the password manually.

maxence
OpenVpn Newbie
Posts: 7
Joined: Mon Aug 01, 2022 3:59 pm

Re: Password security on Ovpn community

Post by maxence » Wed Aug 03, 2022 12:33 pm

Hello,

Thanks for mooving the forum.

Do you know how to force users to enter the password manually ?

Thanks for the help !

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Password security on Ovpn community

Post by TinCanTech » Wed Aug 03, 2022 12:47 pm

When you install Openvpn, there should be a custom option to disable password saving.

Post Reply