topic User Credentials are sent in clear text in alfresco community 5.2 in Alfresco Forum

User Credentials are sent in clear text in alfresco community 5.2

leela — Fri, 31 Jan 2020 11:44:27 GMT

Hello Every one,

User credentials are transmitted as plain text, how to encrypt the user and admin creadentials, While authenticating, the entered password can be run through the same function and the result can be compared to the entry in the database to authenticate. kindly do needful.

Regards

Leela N

Re: User Credentials are sent in clear text in alfresco community 5.2

jljwoznica — Fri, 31 Jan 2020 13:37:35 GMT

I'm not quite sure I understand your question. Are you saying that using the standard out of the box interfaces, your passwords are not encrypted? Can you explain where you are seeing the user/pass not encrypted? thank you.

Re: User Credentials are sent in clear text in alfresco community 5.2

bip1989 — Fri, 31 Jan 2020 14:15:13 GMT

I don't think it's problem related to Alfresco. Any web application would transmit plain text by default unless you have implemented certain mechanisms.

I am not sure if your sever is in production, but it is recommended to use/implement SSL. credentials are by default encrypted when using SSL.