Block of password manager

[D@ve]

Hi,
Why does plesk block the password manager of the browser? This is quite a lack of security. I have massive problems with customers choosing very simple passwords which can be exposed by a simple dictionary attack, sticking it per postit on ther LCD...
And I for my self have the same problem. I normaly use 12 digit randomized passwords with numbers/camelCase/special chars etc. Since plesk is a tool I'm daily working with, these password strength is not practicable with plesk without a password manager.

I can't understand how a high level software like Plesk has such a design flaw.

Regards, Dave

PS: I'm relativley new to plesk (former used confixx). I'm sorry if I missed the option in the config area how to deactivate this.

 

[Sergey L]

Hello Dave,

Many would consider browser password cache same insecure as a sticker on LCD. This problem was reported to us a security concern many times. I would recommend to use password generator which produces random yet easy-to-remember password, or perhaps use more advanced password manager like LastPass, which doesn't store your password (master password concept is used), yet can put in Plesk login form.

Regards

 

[D@ve]

Hello Dave,
Many would consider browser password cache same insecure as a sticker on LCD. This problem was reported to us a security concern many times. I would recommend to use password generator which produces random yet easy-to-remember password, or perhaps use more advanced password manager like LastPass, which doesn't store your password (master password concept is used), yet can put in Plesk login form.

Please no This-is-not-a-bug-its-a-feature-discussion. This IS a problem in design.

You can't force the security messures to the user if it is to complicated. You always need a balance between security and simplicity. And for ME it maybe okay to use an additional password manager but not for the normal end user. They WILL use a simple password.

Many would consider browser password cache same insecure as a sticker on LCD.

Consider what is more insecure, the browser cache, or a simple password like "admin".

This problem was reported to us a security concern many times.

ÃŒf this problem was reported many times: Please act accordingly and make this "feature" optional.

Plesk is beeing used as a negative example ("don't do it that way") for inffective security measures in our lecture at university (security for developers). THAT alone should give you some food for thought.

It's really annoying.

 

[Sergey L]

Thanks for your opinion Dave. We'll think on that.