Users

All Posts (7)

avatar

mmedouard

Security issue on Devolutions Password Manager

avatar
avatar
avatar

OK, that is exactly the option I was looking for.

Thanks you very much for your help !

I am surprised that is not the default security setting.

Best regards

Marc

Security issue on Devolutions Password Manager

avatar
avatar
avatar

Hello,

After the last updates, I don't know which one, the problem of the security already discuss 2 years ago comes back. (https://forum.devolutions.net/topics/41460/security-problem-on-personal-hub#190146).

If there is an option to enable the disconnection I dont' find it.

My request is the same, when I close the browser with extension Devoltuion workspace I must be logged out of Devolution Workspace.

Currently somebody who is using my session (my children, a hacker) he has got all my passwords with Devolution whitout having to enter a password. That is bad.

I hope you can update the version to make it more secure.

Many thanks

Marc

Security problem on Devolutions Cloud

avatar
avatar
avatar
avatar
avatar

Hello,

Thanks for the update.

Yes, the version 2024.1.2.3 asks me the password when I open the browser, It is good.

But if I close the browser and re-open, the password is not asked.

I think it is more secure if it was asked.

In a business usage, it should be fine : one login/session = one user.

But in a personal usage, the computer is shared with family, the session of a user could be shared and it is better to ask the password each opening of Edge.

Or perhaps to give us to enable it with an option.

Best regards.

Marc

Security problem on Devolutions Cloud

avatar
avatar
avatar
avatar
avatar

Hello,

This password should be not in the cache, or only for the cache session.

Currently, if I close my browser, my children take the computer, open the browser and without password they have access to all passwords.

It is bad.

It must no need to clean the cache to be safe.

I did a support session with your team today to show the problem.

I hope that will help

The workaround suggested is add the MFA, agree but really a workaround.

Thanks for all.

Best Regards

Marc

Security problem on Devolutions Cloud

avatar
avatar
avatar
avatar
avatar

Thanks but not totally.

When I am opening my browser Edge I am not logged in:

But no need password to retrieve the access, just click on "Log In".

I need to make an update somewhere, my version of the extension is Version: 2024.1.1.1

Best regards,

Marc

Security problem on Devolutions Cloud

avatar
avatar
avatar
avatar
avatar

Thanks for your replies,

Yes, the support gave me this option and it works for web access to Hub Personal Devolutions but no modification on the Edge Devolutions

Workspace extension.

The access is authorized without password prompt, all accounts and passwords are available.

BR,

Marc

Security problem on Devolutions Cloud

avatar
avatar
avatar
avatar
avatar

Hello,

I tested your password management solution to replace Bitwarden but to my huge surprise the main password is not required by the “Devolutions

Workspace” extension each time the browser is opened, or the computer is started.

All passwords are available without password after the first entry.

I am very surprised that the default configuration doesn’t ask for the password every time the computer is started, or the browser is opened.

The support team told me this option is available on HUB Business.

Ok why not! Your solutions are very useful, but I can’t buy only one, I must buy 3 licenses!

Is it a strategy that you don’t want too many personal users? 😊

1 - 7 of 7 items