[GH-ISSUE #1643] Warning to users of password transmission in the clear? #1396

New issue

Open

opened 2026-02-28 01:29:54 +03:00 by kerem · 1 comment

kerem commented

2026-02-28 01:29:54 +03:00

Owner

Originally created by @frankcohen on GitHub (Aug 5, 2023).
Original GitHub issue: https://github.com/tzapu/WiFiManager/issues/1643

Since WifiManger is using HTTP, does it make sense to warn users that passwords are transmitted in the clear? Perhaps add this text to the UI:

Passwords are sent to the device in the clear, and optionally stored on the device with no encryption. Someone could extract these if they got their hands on your device.
-Frank

Originally created by @frankcohen on GitHub (Aug 5, 2023). Original GitHub issue: https://github.com/tzapu/WiFiManager/issues/1643 Since WifiManger is using HTTP, does it make sense to warn users that passwords are transmitted in the clear? Perhaps add this text to the UI: `Passwords are sent to the device in the clear, and optionally stored on the device with no encryption. Someone could extract these if they got their hands on your device. ` -Frank

kerem commented

2026-02-28 01:29:55 +03:00

Author

Owner

@B1ackt34 commented on GitHub (Dec 15, 2024):

I think, for added security, users may configure a Guest account on their AP so, in case of credentials lost or stolen there is a layer of protection

@B1ackt34 commented on GitHub (Dec 15, 2024): I think, for added security, users may configure a Guest account on their AP so, in case of credentials lost or stolen there is a layer of protection