Eric, I got around to looking at the Tech Note Tim Penner put up talking about this subject. https://kb.4d.com/assetid=78310
I haven't looked at or used the Validate password method but if you are using 4D users it's useful. First you can pass a hashed ( https://doc.4d.com/4Dv17R5/4D/17-R5/Generate-digest.301-4127707.en.html) password as well as plain text. More to the point of workstation security after 4 failed attempts 4D itself enforces a 10 second freeze. Sadly this freeze seems to only apply to every 5th attempt - using both17.2 and 17r6. On Thu, Sep 5, 2019 at 7:22 AM Eric Naujock via 4D_Tech < [email protected]> wrote: > Does anyone have a replacement login system for 4D that offers stronger > authentication security than the current system. Since the current system > does not enforce password changes, or password complexity it is a pretty > poor system in the current age. While the encryption is crypt is is still > brute force attackable as well. There are no failed login lockouts. Nor is > three the ability to have two factor authentication? Or is this something > beyond what anyone out there is using. > > ----------------------------------------------------------------------- > > MacCafe > 7860 Central Ave. > Toledo, OH 43617 > Phone: (419) 885-1240 X 241 > Fax: (419) 517-2063 > Eric Naujock - ACSA 10.2, 10.3, 10.4 Apple - ACTC 10.5, 10.6, 10.7, > 10.8, 10.9, 10.10, -ACSP 10.11, 10.12, 10.13 > http://www.mac-cafe.com > email: e <mailto:[email protected]>[email protected] > <mailto:[email protected]> > AOL IM: erlic > > > > ********************************************************************** > 4D Internet Users Group (4D iNUG) > Archive: http://lists.4d.com/archives.html > Options: https://lists.4d.com/mailman/options/4d_tech > Unsub: mailto:[email protected] > ********************************************************************** -- Kirk Brooks San Francisco, CA ======================= What can be said, can be said clearly, and what you can’t say, you should shut up about *Wittgenstein and the Computer * ********************************************************************** 4D Internet Users Group (4D iNUG) Archive: http://lists.4d.com/archives.html Options: https://lists.4d.com/mailman/options/4d_tech Unsub: mailto:[email protected] **********************************************************************

