Is Confluence safe enough to store passwords

[Deleted user]

I am using Confluence 4.1. I would like to store logins and passwords on a page in Confluence.

Outside of the normal security regarding who can get into Confluence and who can get to which space, is confluence secure enough to store loigns and passwords? I'd prefere to to that rather then passpack or lastpass.

Thanks

[Colin Goudie · Accepted solution]

Page contents are going to be unencrypted in the database so the security implications will revolve around

• Ensuring SSL to the site so plain text passwords are not transmitted to the server
• Good database security setup. i.e. A specific db user for confluence, good password etc..
• Ensuring limited access to the page/s that store the passwords so you don't accidently let people see the apge that you don't want seen

[VitalyA]

It's not a good idea to store passwords in Confluence in plain text

It is not a good idea to store passwords in plain text, anywhere.

[David David]

It's not a good idea to store passwords in Confluence in plain text, so the next best thing is to encrypt them and then store them in Confluence.

This plugin is looking promising:

http://wiki.customware.net/repository/display/VAULT/Security+and+Encryption+Plugin

[Jared Campbell]

Updated link: https://docs.servicerocket.com/display/SE/Security+and+Encryption

[Charles Wells]

There are some good add-ons in the Marketplace, however, these only work on the standalone versions. I've seen nothing to assist with this in cloud instances. I can vouch for Secure Content as I have prior experience with it.

https://marketplace.atlassian.com/plugins/com.prcpo.confluence.plugins.secure-content-block/server/overview

https://marketplace.atlassian.com/plugins/net.customware.confluence.plugin.vault/server/overview

https://marketplace.atlassian.com/plugins/dk.translucent.atlassian.confluence.crypto-plugin/server/overview