Password Management

Objective: 

 Keep user certificate passwords safe. 

 Guidelines: 

 

 Never store user certificate passwords in a database or in any file that others could access. 

 Always use HTTPS so that passwords are encrypted while travelling between the user's browser and your server. This stops attackers from intercepting them.