Automate password change between domoticz and ESPeasy

[ssd]

Hello,

I am just curious to know is there any way that if we change the login user id and password in domoticz the userid and password of the controller in ESPeasy will automatically change? Or does someone have any suggestions so that I can work on it? Or I should move on to continue with what I have as it is an impossible task to achieve?

Thanks!!

[Ath]

That is not possible, nor in any way safe.

How often do you change the password on Domoticz? After that, all equipment connecting to it need to have their settings updated.
It's like when changing your e-mail password, you'll have to update all e-mail clients. Manually.

[TD-er]

Just for the sake of argument, imagine it would be possible.
So you update the password in Domoticz and the password on all connected devices also changes.

Now think of a reason WHY you change a password.
One reason could be because the old password was compromised, or it is simply policy, which has the same reason for changing a password only you don't know if it is compromised.

What if a password is compromised, then an attacker may also be connected to your infrastructure and then changing a password will present the attacker the new password.
So it isn't really wise to allow to update a password via this route.

[ssd]

That is not possible, nor in any way safe.

How often do you change the password on Domoticz? After that, all equipment connecting to it need to have their settings updated.
It's like when changing your e-mail password, you'll have to update all e-mail clients. Manually.

Agreed. Fair enough.

[ssd]

Just for the sake of argument, imagine it would be possible.
So you update the password in Domoticz and the password on all connected devices also changes.

Now think of a reason WHY you change a password.
One reason could be because the old password was compromised, or it is simply policy, which has the same reason for changing a password only you don't know if it is compromised.

What if a password is compromised, then an attacker may also be connected to your infrastructure and then changing a password will present the attacker the new password.
So it isn't really wise to allow to update a password via this route.

Okay. Thank you. Just had a random thought and was confused but an explanation from both of you helped. Thank you!!