Clarify warnings about disabling the master password.

This commit is contained in:
Dave Page 2019-06-05 15:32:47 +01:00
parent caf181d5e3
commit e691885881

View File

@ -25,10 +25,15 @@ passwords. This is applicable only for desktop mode users.
.. note:: If the master password is disabled, then all the saved passwords will .. note:: If the master password is disabled, then all the saved passwords will
be removed. be removed.
.. warning:: If master password is disabled, then the saved passwords will be .. warning:: If the master password is disabled, then the saved passwords will
encrypted using a key which may not be as secure as master password. It is be encrypted using a key which is derived from information within the
strongly recommended to use master password if you use the *Save Password* configuration database. Use of a master password ensures that the encryption
option. key does not need to be stored anywhere, and thus prevents possible access
to server credentials if the configuration database becomes available to an
attacker.
It is **strongly** recommended that you use the master password if you use
the *Save Password* option.
* The master password is not stored anywhere on the physical storage. It is * The master password is not stored anywhere on the physical storage. It is
temporarily stored in the application memory and it does not get saved when temporarily stored in the application memory and it does not get saved when