Removed summary of answers/comments (doesn't belong in the Q body). Improved formatting, fixed grammar.

Source Link

edit approved Aug 25, 2012 at 0:37

394
3
21

Is it legal to log passwords from failed logins?

I was just wondering if it'sIs it legal to store/log mistyped passwords and how?

How many of you have seen this happen in a log file or dbDB?

EDIT: so what I understand from your comments is: legal depends on what country (could have thought of this myself) but it is a big security risk in any case... thanks

edited title

Link

edited Oct 25, 2011 at 12:32

Rory Alsop ♦

61.7k
12
120
325

Is it legal to log wrong passwords from failed logins

Tweeted twitter.com/#!/StackSecurity/status/128275801685757953

occurred Oct 24, 2011 at 1:05

summary of the answers

Source Link

edited Oct 23, 2011 at 18:44

Olivier

163
6

I was just wondering if it's legal to store/log mistyped passwords and how many of you have seen this happen in a log file or db?

EDIT: so what I understand from your comments is: legal depends on what country (could have thought of this myself) but it is a big security risk in any case... thanks

deleted 56 characters in body

Source Link

edited Oct 23, 2011 at 13:41

Hendrik Brummermann

27.3k
6
83
121

Loading

Source Link

asked Oct 23, 2011 at 12:58

Olivier

163
6

Loading

Stack Exchange Network

Return to Question

Is it legal to log passwords from failed logins?

Is it legal to log passwords from failed logins

Is it legal to log passwords from failed logins?

Is it legal to log wrong passwords from failed logins