# Saving login credentials in designer **URL:** \ **Category:** Ignition\ **Created:** [August 8, 2019, 1:00pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264 "2019-08-08T13:00:19Z")\ **Posts on this page:** 16\ **Page:** 1
**Author:** ![waldner](https://avatars.discourse-cdn.com/v4/letter/w/a5b964/32.png) [@waldner](https://forum.inductiveautomation.com/u/waldner)\ **Post date:** [August 8, 2019, 1:00pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/1 "2019-08-08T13:00:19Z")
I don’t know whether this has been requested or discussed before, but…how about offering an option to save designer login credentials? ---
**Author:** ![KathyApplebaum](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kathyapplebaum/32/7261_2.png) [@KathyApplebaum](https://forum.inductiveautomation.com/u/KathyApplebaum)\ **Post date:** [August 8, 2019, 1:55pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/2 "2019-08-08T13:55:11Z")
Can you tell us more about what the goal is here? Sounds like you’re asking to make the Designer less secure, which is scary to us, because someone with access to the Designer has access to changing quite a bit about your project and your data. ---
**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\ **Post date:** [August 8, 2019, 2:03pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/3 "2019-08-08T14:03:50Z")
Although, if you use Active directory, it is possible to use SSO (Single Sign On) with the designer. ---
**Author:** ![waldner](https://avatars.discourse-cdn.com/v4/letter/w/a5b964/32.png) [@waldner](https://forum.inductiveautomation.com/u/waldner)\ **Post date:** [August 8, 2019, 2:12pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/4 "2019-08-08T14:12:22Z")
Well, simply an option/request to save the credentials after entering them at the login screen (see image), the same way many browsers do when accessing password-protected sites. Or a “remember me” checkbox. Or integration with password managers. Whatever. Having to re-enter complex credentials by hand every time is quite annoying. ![Screenshot_2019-08-08_16-11-23](https://us1.discourse-cdn.com/inductiveautomation/original/2X/d/d2fccea1d2936ace1b39b2121518401a9eca44c4.png) ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [August 8, 2019, 2:16pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/5 "2019-08-08T14:16:47Z")
> [@waldner](#): > > Or integration with password managers. Now _ **that** _ is a great idea. KeepassXC please. (: ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 8, 2019, 2:47pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/6 "2019-08-08T14:47:47Z")
Password managers are already usable with like one extra step beyond full integration: invoke your PW manager shortcut, type in enough to get this entry to show up, then copy the password. If you have a complex username as well I guess that’s pretty annoying. I have no idea how integration with a password manager can be done from Java. ---
**Author:** ![waldner](https://avatars.discourse-cdn.com/v4/letter/w/a5b964/32.png) [@waldner](https://forum.inductiveautomation.com/u/waldner)\ **Post date:** [August 8, 2019, 3:16pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/7 "2019-08-08T15:16:47Z")
> [@Kevin.Herron](#): > > I have no idea how integration with a password manager can be done from Java. That was just an idea; a simple "remember credentials" checkbox would be more than enough for me. In fact I'm surprised I found no previous discussion in the forum, I would guess that other people want to be able to save their credentials. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 8, 2019, 3:19pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/8 "2019-08-08T15:19:16Z")
It’s not possible to securely remember credentials, though, which is (part of) why we’ve never done it. Where do you think they’d get saved to? ---
**Author:** ![waldner](https://avatars.discourse-cdn.com/v4/letter/w/a5b964/32.png) [@waldner](https://forum.inductiveautomation.com/u/waldner)\ **Post date:** [August 8, 2019, 3:30pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/9 "2019-08-08T15:30:55Z")
I don’t know the internals of the designer, but I guess that it’s doable, given the number of other programs that offer that option (browsers are the obvious example). If not, then well, no worries; it was just a convenience feature. ---
**Author:** ![cmallonee](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/cmallonee/32/6416_2.png) [@cmallonee](https://forum.inductiveautomation.com/u/cmallonee)\ **Post date:** [August 8, 2019, 3:34pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/10 "2019-08-08T15:34:43Z")
Oh, it’s easily doable, but not in a secure fashion. Your designer prefs are just saved into a json(?) file, which can easily be read by anyone with access to your environment and an idea of where to look. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 8, 2019, 3:36pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/11 "2019-08-08T15:36:19Z")
I’m just trying to explain why a feature that seems simple on the surface isn’t actually simple at all. A password manager works by deriving an encryption key from your master password and then storing data only once it’s been encrypted using that key, and decrypting data using that key when you ask it for information. A browser password manager, when you’re logged into an account, works the same way in principle. A browser storing your passwords when you are not logged in may as well be storing your credentials in plaintext. They are likely obfuscated and hidden somewhere, but they are not stored securely. At best Ignition would store your credentials in an obfuscated manner somewhere on disk, which from a security perspective may as well be plaintext because anybody who knows what they’re looking for can derive the plaintext. ---
**Author:** ![waldner](https://avatars.discourse-cdn.com/v4/letter/w/a5b964/32.png) [@waldner](https://forum.inductiveautomation.com/u/waldner)\ **Post date:** [August 8, 2019, 3:41pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/12 "2019-08-08T15:41:47Z")
Not to argue, but if someone gets access to the machine and the password was saved (assuming the designer feature were implemented), they can just fire up the designer and find the credentials already filled in, so they’re in anyway, regardless of how they’re saved on disk. And If one is (rightly) worried about that, they can simply choose to not save their credentials. I’m not advocating mandatory saving of credentials of course. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [August 8, 2019, 3:49pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/13 "2019-08-08T15:49:25Z")
Yes you’re right about that. I don’t really know why I’m arguing about this, it’s a valid request. You can make it official at [https://ideas.inductiveautomation.com](https://ideas.inductiveautomation.com). In the past people have asked for client auto-login, but this is the first I’ve heard for the designer. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [August 8, 2019, 5:20pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/14 "2019-08-08T17:20:30Z")
> [@Kevin.Herron](#): > > it’s a valid request. You can make it official at If it isn't done with a password manager, I'd like to be able to _ **down** _-vote it. > [@waldner](#): > > they can just fire up the designer and find the credentials already filled in, so they’re in anyway, regardless of how they’re saved on disk. No, generally not. Password managers toss their keys when the screen locks or the computer sleeps, and have to be decrypted separately from user login. Screen locking is a security best practice in general, for the same reason. > [@Kevin.Herron](#): > > I have no idea how integration with a password manager can be done from Java. KeepassXC listens on a local port for connections from user-approved applications that can ask for the user/pwd combo for specific URLs. It is an open-source project, so its methods of securing this are inspectable. If there was an extension point for client and/or designer login, it probably wouldn't be hard to write a module that conforms to that interface. ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [August 8, 2019, 5:33pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/15 "2019-08-08T17:33:42Z")
In the future, we would like to make the Designer Identity Provider aware, which opens up many possibilities such as web browser SSO using a “Remember Me” option (where we cache your session on a token or cookie basis). We would also get password manager support for free through the browser and the potential for new open standards such as webauthn. ---
**Author:** ![waldner](https://avatars.discourse-cdn.com/v4/letter/w/a5b964/32.png) [@waldner](https://forum.inductiveautomation.com/u/waldner)\ **Post date:** [August 8, 2019, 6:39pm UTC](https://forum.inductiveautomation.com/t/saving-login-credentials-in-designer/27264/16 "2019-08-08T18:39:04Z")
> [@pturmel](#): > > No, generally not. Password managers toss their keys when the screen locks or the computer sleeps, and have to be decrypted separately from user login. Screen locking is a security best practice in general, for the same reason. No, of course, I was talking about the "simple" case (no password manager integration).