Skip to content

Prevent storing password in browser storage

Jump to bottom
Dele Olajide edited this page Nov 4, 2018 · 1 revision

There are many ways to prevent storing the XMPP user password. Pade uses the following.

  • Single Sign On (SSO) with Credential Management API (browser stores password securely)
  • Windows SSO. No password involved. Trust between desktop and XMPP server
  • Client Certificates. No password involved. Trust between browser and XMPP server
  • Open Identity Schemes like uPort. Mobile stores the password. Login via QRCode like WhatsApp
  • Time based One Time Passwords (TOTP). Don't store password. Store an access token instead.
Clone this wiki locally