host 0 Posted ... After account creation it would be good idea to add option that can unlink your email from the database for security purposes. If someone get's into your email somehow thereafter he could reset the password and view the connected vpn users ip addresses. Does airvpn send any messages to email like confirmation? If that doesn´t sound good it might be good idea to accept only security question to reset password (option).Second thing, also cencoring connected users ip addresses like this 11.22.33.xx would be good too. I hope somebody agree with me . Quote Share this post Link to post
zhang888 1066 Posted ... In case someone gets access to your main real-life email, you probably have a bigger security issue other thanan attacker that would like to reset your password in order to get your real IP. When someone controls importantassets like emails, the threat gets similar to an attacker with physical access.You can partially mitigate this threat by using a dedicated email for all the less-important services, which will notput your other activities at risk in case it gets compromized. A gmail with 2FA and a strong password is a good choice. Quote Hide zhang888's signature Hide all signatures Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees. Share this post Link to post