Disable "Save password" checkbox

[cpaixao]

Dear community,

I'm finding a hard time trying to disable the "Save password" checkbox

.

The issue is that in the old gen client (2.x) I used to achieve that by by adding the DWORD "disable_save_password" = 1 in REGEDIT. However, that doesn't seem to work in the OpenVPN Connect (3.X) version. I've seen this same question asked by many others over the internet, but apparently no one has found or at least disclosed with a solution so far, then I thought that asking here in the official forum would be useful. Is there a way to prevent the user from saving passwords on the OpenVPN Connect client?

[openvpn_inc]

Hi,

At the moment, you cannot disable that. There is already a feature request to have an option/parameter to disable that, hence, on future releases, it will be available.

Regards,
.\kionci

[elwood]

The registry key detailed on this page works with OpenVPN 2.6.1 community edition.

Elwood

[IWant2Know]

Below it is noted as a 'feature request' in August 2022. I have read several other community postings dating back to 2012 with a similar note: 'feature request.'

Will this feature ever become available?

We are at least 1 year after the post below and many years after the prior posts.

From a security perspective, this is a great 'hole' in a VPN, not due to the encryption, but due to the ability for a hacker to take control of a workstation, click on the OpenVPN client and have direct access without a challenge. We are implementing MFA, but two challenges are better than one.

The work arounds thus far have focused on updating a registry key. This is a non-answer in so much as one has to get to the remote computer and run a script at an elevated prompt. Or update the configuration files with an added script. 1 or 2 computers: ok, 20+: unmanageable.

There are many 'good' flags in the OpenVPN server-side configuration that allow one to toggle various client features, thus I am confused after the number of years this feature has been discussed it has not made it to reality.

Thanks in advance.

[JustMeHere]

I opened a helpdesk ticket with the OpenVPN connect team. The response I was given was that since they passed SOC 2 Type 1 this is not an issue and will not be addressed. So, don't hold your breath.

It's a shame, because saving passwords makes 2FA only 1FA.