Hi
i have a field im My ODK form that collects passwords, is there a data type or a special attribute to hide the entered characters entered by the data collector and make them appear as stars or dots?
Please keep in mind that ODK Collect is not designed for secure storage of
survey content.
The primary layer of security is the device's screen lock.
After that, all data is stored in plain text on the device and transmitted
in plain text. Only if HTTPS is used will the data be securely transmitted
to the server, and on the server it is again stored in plain text.
Most significantly, any text editor application on the device can open and
view the contents of any of your filled-in forms.
Encrypted forms still store the data in plain text up until the filled-in
form is finalized, after which it is encrypted and secured, and securely
transmitted to the server, and, on the server, these forms remain encrypted
and secured.
···
On Tue, Feb 21, 2017 at 12:59 AM, wrote:Hi
i have a field im My ODK form that collects passwords, is there a data
type or a special attribute to hide the entered characters entered by the
data collector and make them appear as stars or dots?--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en
You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com
Thank you Mitch i understand that and i also use Encrypted forms, i was just wondering if there was a data type like (integers,text) or if there was an appearance attribute like (field-list,table-list,numbers) which will hide the entered characters by the data collectors or make them appear as stars.
Regards
···
On Tuesday, February 21, 2017 at 10:59:16 AM UTC+2, mustafa...@gmail.com wrote: > Hi > i have a field im My ODK form that collects passwords, is there a data type or a special attribute to hide the entered characters entered by the data collector and make them appear as stars or dots?Not yet. There has been a discussion of creating a string hash function,
which would be the ideal way to handle passwords (but imposes restrictions
of the downstream use of them).
In modern systems, plain text passwords are never stored. Instead, they
would be concatenated with a random text string, then the combination would
be hashed with, e.g., SHA256, and the resulting hash plus the random text
string would be all that is stored (e.g., in the form, on a web server,
etc.). This allows verification of a password against the stored value, but
not recovery of the plaintext password.
i.e., simply showing ***'s while entering the string gives a false sense of
security. The end use would need to be thought about.
···
On Tue, Feb 21, 2017 at 11:07 PM, wrote:On Tuesday, February 21, 2017 at 10:59:16 AM UTC+2, mustafa...@gmail.com wrote:
Hi
i have a field im My ODK form that collects passwords, is there a data
type or a special attribute to hide the entered characters entered by the
data collector and make them appear as stars or dots?Thank you Mitch i understand that and i also use Encrypted forms, i was
just wondering if there was a data type like (integers,text) or if there
was an appearance attribute like (field-list,table-list,numbers) which
will hide the entered characters by the data collectors or make them appear
as stars.Regards
--
Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en
You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com