Hi!
I read some posts about this on the forum.
I understand that network credentials in FFS should be managed by Windows Credential.
Is it a potential risk when ransomware compromises the user data?
I understand this type of malware uses Windows Credential to keep encrypting files throughout the network.
I think a FFS Password Manager would be a good idea.
FFS Password Manager
- Posts: 2
- Joined: 27 Mar 2023
-
- Posts: 2450
- Joined: 22 Aug 2012
You don't need to use the Credential Manager.
You can choose to always enter the username and password manually, and select NOT to save it for later (re)use.
Or simply run your syncs as a different user; the safer way to go anyway.
See e.g. the second part of this reply.
Regarding using a Password Manager: the Windows Credential Manager is simply one of many password managers out there, but is obviously best integrated in the Windows environment.
As far as other password managers are concerned, it is always the question which ones to support and how well those can be integrated into or supported from the FFS program.
I can imagine it may be a lot of work to make this fool-proof, and the developer may have other priorities regarding features and enhancements.
It may even be, that the author is cautious of getting blamed (rightfully or not) for potential security risks caused by supporting those other tools. Using the Windows Credential Manager, that responsibility rests fully outside FFS.
You can choose to always enter the username and password manually, and select NOT to save it for later (re)use.
Or simply run your syncs as a different user; the safer way to go anyway.
See e.g. the second part of this reply.
Regarding using a Password Manager: the Windows Credential Manager is simply one of many password managers out there, but is obviously best integrated in the Windows environment.
As far as other password managers are concerned, it is always the question which ones to support and how well those can be integrated into or supported from the FFS program.
I can imagine it may be a lot of work to make this fool-proof, and the developer may have other priorities regarding features and enhancements.
It may even be, that the author is cautious of getting blamed (rightfully or not) for potential security risks caused by supporting those other tools. Using the Windows Credential Manager, that responsibility rests fully outside FFS.
- Posts: 2
- Joined: 27 Mar 2023
@Plerry, thanks for your answer.
I found out FFS will save its own user/password DB if I use FTP connection to NAS.
I save backups as batch jobs, and then I call them automatically using Windows Task Manager. That is why I need a Password Manager outside Windows Credentials.
I found out FFS will save its own user/password DB if I use FTP connection to NAS.
I save backups as batch jobs, and then I call them automatically using Windows Task Manager. That is why I need a Password Manager outside Windows Credentials.
