Page 1 of 1

Website protection password or user password or both?

Posted: Friday 13 September 2019 11:02
by havnegata
Is there any difference security wise between having a Username and password defined in:

1.Setup/Settings/System/Website Protection

or in:

2.Setup/More options/Edit users?

I'm the only user on the system and I have never defined any users other than Controlicz, only Website protection. Does this mean my system is less secure? Is it advisable to have both?Image

Re: Website protection password or user password or both?

Posted: Friday 13 September 2019 14:18
by AllesVanZelf
It looks like this is the same.
My user I made in:
1.Setup/Settings/System/Website Protection
is also visible in:
2.Setup/More options/Edit users.

Re: Website protection password or user password or both?

Posted: Friday 13 September 2019 15:30
by ben53252642
Many don't realize that the username is actually a great opportunity to further enhance the security.

For example, the username "admin" is obviously at the top of the list of names that a hacker will try.

A username like: "admin_Z4rIl1V" for example (I just made it up) is extremely unlikely to be guessed but obviously don't use it now that I listed that username on a public forum cause it will probably get picked up by some bot and added to a dictionary list.