Saving Passwords To The Local Device

So In my app (iOS), you have to register in order to use the service (a food service). But in order to change details about your account (username, password, and email), you have to reenter your password. Except for if the user logged out, this is the only time you need your password to use the app. So I was wondering, since the user basically never uses their password, and its likely they would forget it the one time they might need it, is it ok if I store their password to their local device (in NSUserDefaults)?

SVN command line client: checkout refused when LDAP password changed “svn: OPTIONS of” (repo) “authorization failed” (but works in TortoiseSVN)

When using the command line/terminal svn client, a colleague is getting “svn: OPTIONS of ” [repo] “…authorization failed” error message when they attempt to checkout the repo to be their local working copy.

Storing plaintext passwords for detecting fraud

I am well aware of best practices for storing user passwords:

How can I estimate the entropy of a password?

Having read various resources about password strength I’m trying to create an algorithm that will provide a rough estimation of how much entropy a password has.

System that splits passwords across two servers

I stumbled upon this news article on BBC,

Securing credentials passed to web service

I’m attempting to design a single sign on system for use in a distributed architecture. Specifically, I must provide a way for a client website (that is, a website on a different domain/server/network) to allow users to register accounts on my central system.

How to implement a safe password history

Passwords shouldn’t be stored in plain text for obvious security reasons: you have to store hashes, and you should also generate the hash carefully to avoid rainbow table attacks.

What .NET objects should I use to create a cookie based session in MVC?

I’m writing a custom password reset application that uses a validation technique that doesn’t fit cleanly with ASP.NET Membership Provider’s challenge questions.

Storing ‘sensitive’ data in settings file

I’m writing a small utility in AutoIt that connects to Twitter. I would like to store the username and password in the programs setting file, but I know that it needs to be encrypted obviously. Previously when I’ve done this for personal use I’ve just adopted an iniformat – written to a temporary file and then encrypted it using a rediculously long password and 256 bit AES encryption, just calling the file “settings.eini”.

Why do web sites require certain characters in their credentials? [closed]

Closed 11 years ago.