Online Accounts saves password in plain text.
Bug #1090638 reported by
Sudhir Khanger
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Online Accounts: Google ClientLogin plugin |
Invalid
|
Undecided
|
Unassigned |
Bug Description
I added my Google account to Online Accounts. I see Online Accounts saves password in plain text. Open Passwords and Keys right click on Ubuntu Web Accounts and click show password and it shows your password.
To post a comment you must log in.
Data stored in GNOME Keyring is encrypted, if the login keyring has a password set, which it does by default:
https:/ /live.gnome. org/GnomeKeyrin g/SecurityFAQ