2 Replies Latest reply: Dec 23, 2016 7:19 AM by Dmitry Barakhov RSS

    Database credentials are saved in plain text in Qlik Sense Desktop

    Dmitry Barakhov

      According to help:

       

      In Qlik Sense Desktop, all connections are saved in the app without encryption. This includes possible details about user name, password, and file path that you have entered when creating the connection. This means that all these details may be available in plain text if you share the app with another user. You need to consider this while designing an app for sharing.

       

      https://help.qlik.com/en-US/sense/2.2/Subsystems/Hub/Content/LoadData/connect-data-sources.htm

       

       

      In Qlick Sense Desktop application file is qvf file - binary. I wonder where user name and password may be stored in clear text ? It is important to know because of security policy of our company - database credentials should not be stored in clear text.