Password storage in OpenFlow

[Jakob Kristoffersen]

Hi everyone,

I have read through the documentation (https://docs.openiap.io/index.html) but I can't seem to find any specific section related to security. Apologies if it's already there and I've overlooked it.

I understand that credentials used for logins are stored in OpenFlow and then called when used in OpenRPA. Are the passwords stored in OpenFlow encrypted?

Thanks,

Best regards

Jakob

[Allan Zimmermann]

Good question. Yes
OpenFlow supports encrypting any or all data using EAS265 encryption. You do that by setting the _encrypt property on the document doing insert/update
To make that a little more easier in the robot, we added "Add Credentials" and "Get Credentials" ( located under OpenRPA.OpenFlow) to OpenRPA that create an object in the openrpa collection where username and password is set to be encrypted. We also added a specific interface for setting/updating these objects inside openflow under admin -> Credentials.

Please note there is two similar activities under utilities. There are to be used by people that use the robot in offline mode (without openflow) and saves the credentials in Windows Credential store instead. But try and avoid using these, it much better to have central administration of credentials, especially if you running HD robots or distributed robots.

[Jakob Kristoffersen]

@allan-zimmermann Hi Allan,

Sorry for my delayed reply. Thanks a lot for the clarification!