Password to private gallery not readable

ShamguessShamguess Registered Users Posts: 88 Big grins
edited August 21, 2013 in Bug Reporting
Under "gallery settings" and "security and privacy" there is the opportunity to add a password for client's to enter their gallery. The problem I have is when I add a new password in the settings, it becomes asterisk ******** as I type the word. Even as the logged in owner of the site, I can't read what password I just wrote. Please fix this bug so we owners don't have to memorize passwords that no one else can see in the first place.

Comments

  • denisegoldbergdenisegoldberg Administrators Posts: 14,383 moderator
    edited August 20, 2013
    All passwords are now encrypted. There is a discussion on this in the thread Password ******'s. And there is an answer given by a smug hero here.

    --- Denise
    https://www.denisegoldberg.com ... https://denise.smugmug.com

    Musings & ramblings at https://denisegoldberg.blogspot.com
  • WinsomeWorksWinsomeWorks Registered Users Posts: 1,935 Major grins
    edited August 20, 2013
    Shamguess wrote: »
    Under "gallery settings" and "security and privacy" there is the opportunity to add a password for client's to enter their gallery. The problem I have is when I add a new password in the settings, it becomes asterisk ******** as I type the word. Even as the logged in owner of the site, I can't read what password I just wrote. Please fix this bug so we owners don't have to memorize passwords that no one else can see in the first place.

    I agree with you, and the responses given by SmugMug so far on this are completely ridiculous. Here's the post(s) that Denise references, and like someone else mentioned, it's not as if passwords were nuclear launch codes! They really need to fix this. Here's the post ...


    FYI: I did hear back from a SmugMug Support Hero - this is what they told me:

    I'm sorry, it is no longer possible for you, or us, to see passwords once you save the gallery. If you or the client have forgotten the password, you will simply need to create a new one. We did this for security, I'm sorry for the inconvenience.

    headscratch.gifI'm all for security, but the only way to see the Gallery Passwords is when you are already logged in to the main SmugMug account. At that point you don't need a Gallery Password because you already have full access to view, edit, delete, etc. all of the photos in the account - Password protected or not.

    I guess I'll need to start a spreadsheet with all of my SmugMug Gallery Passwords in case I need to view a gallery as my clients do or remind them of the password if they forget. At a minimum, I will need to find some way to store the passwords with my client information now that I can no longer see it in the Gallery Settings section.
    Anna Lisa Yoder's Images - http://winsomeworks.com ... Handmade Photo Notecards: http://winsomeworks.etsy.com ... Framed/Matted work: http://anna-lisa-yoder.artistwebsites.com/galleries.html ... Scribbles: http://winsomeworks.blogspot.com
    DayBreak, my Folk Music Group (some free mp3s!) http://daybreakfolk.com
  • ShamguessShamguess Registered Users Posts: 88 Big grins
    edited August 21, 2013
    Encrypting the passwords so the sight owner can't read them makes no sense Smugmug. If someone has the ability to get into my account to where the encrypted password is displayed by *****, then all they have to do is type in their own password and then they can access the gallery! The only one being hurt by this system is the site owner who can't remember the password.... ME!!!
  • phaserbeamphaserbeam Registered Users Posts: 452 Major grins
    edited August 21, 2013
    Shamguess wrote: »
    Encrypting the passwords so the sight owner can't read them makes no sense Smugmug. If someone has the ability to get into my account to where the encrypted password is displayed by *****, then all they have to do is type in their own password and then they can access the gallery! The only one being hurt by this system is the site owner who can't remember the password.... ME!!!

    I remember that in some other thread it was mentioned that SM does not keep the passwords on their own server anymore, so if someone gets into the SM servers they cannot grab all the passwords for all galleries anylonger. Something like that...

    Yes... a really bad mistake by SM not to send out a warning about passwords being not shown in cleartext after unveil.
Sign In or Register to comment.