sysPass / sysPass-doc

sysPass Documentation
https://doc.syspass.org
The Unlicense
6 stars 16 forks source link

The master password can be on the server (in encrypted form) #7

Closed gizezero closed 5 years ago

gizezero commented 5 years ago

Found inconsistency in docs: https://doc.syspass.org/en/3.0/ : "It does not store the master password in the server"

https://doc.syspass.org/en/3.0/application/encryption.html : After logging in with the master password, it’s encrypted and stored within the user’s data in the database.

nuxsmin commented 5 years ago

Hello, it could be more accurate to say that the password isn't stored in plain text, but it's the truth that the password isn't stored, since it's encrypted and stored in the database, which might be installed in other server.

Regards

gizezero commented 5 years ago

Hello Rubén, thanks for answer. The database server is also a server. I think that, If you store something in encrypted, possible to decrypt form, you still store it.

nuxsmin commented 5 years ago

Done :wink:

https://syspass-doc.readthedocs.io/en/3.1/index.html

Thanks for the feedback!