Leonardo Gandini
My feedback
3 results found
-
104 votes
Thank you for your input! We will consider this functionality in upcoming releases, if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
—
IGLeonardo Gandini
supported this idea
·
-
543 votes
We have serious doubts this function can really increase server security:
1) Plesk has built-in protection against brute-force on login – it will lock the login form. So no one can try multiple attempts
2) Arbitrary login name adds very little guess-complexity to a proper password. If you have concerns for your login brute-forced – add another 5-7 characters into your password and feel safe.As changed login name is still very likely to be some sort of vocabulary word or derived from your other account name – this function would only give a false sense of better security. Your security strength is in complex password, not in a complex login name. If you have one good password, you don’t need to treat login as your “second password” – one good password is enough.
As for concerns that default password requirement is set in “weak”, that fail2ban module is not…
An error occurred while saving the comment An error occurred while saving the comment Leonardo Gandini
commented
have serious doubts this function can really increase server security..... and yet this is one of the most voted and requested feature! Can't you just do it and move on? Is it really that difficult? Also is not just a matter of security, we want to login with OUR name.
Leonardo Gandini
supported this idea
·
-
214 votesLeonardo Gandini
supported this idea
·
I know Mikhail, but that doesn't solve the problem. The admin user will always be a valid user in the system.