TL;DR - We no longer require customers to specify a password when connecting to the VPN as we have randomly generated usernames and the password doesn’t affect the security of the VPN tunnel in any way. You still require a password to login to the website Client Area.

To understand more about this decision read on.

An authenticator is the means by which an identity is confirmed e.g. password or 2FA token. When designing information systems its important to choose an authenticator that is commensurate with the sensitivity of the information to which the use of the authenticator permits access. Companies use VPN technology to permit offsite staff secure access to their corporate networks. If an attacker were able to steal an employees credentials they would have full access to all the internal servers on the corporate network. Privacy VPN services use the same technology but instead of providing secure access to an internal network they provide secure access to the Internet. If an attacker were able to steal some credentials they would simply gain access to the Internet like any other IVPN customer and could do no more than use our service without paying for it.

The username and password are only used to check that you have a paid account. They are not used in any way to establish the security of the VPN tunnel itself i.e. cryptographic keys are not derived from them.

IVPN have always generated random usernames (62^8 combinations), so from now on we will use the username as the identifier and remove the requirement for a password. This not only simplifies user experience, but removes the confusion about needing a strong password for the VPN tunnel.

New versions of the IVPN apps will be released today with the username field renamed to ‘Account ID’ and the password field removed. If you are connecting with a non-IVPN app simply specify any password.

Please note: This has no effect on the client area. To access the IVPN Client Area on the website you still need to enter the email address and password you signed up with.

Comments icon
We invite you to discuss this post in our Reddit community or on Twitter. You can also send your feedback to blog@ivpn.net.
Tags: Apps Security

Command-line interface for IVPN released

Posted on May 20, 2020 by Alexandr Stelnykovych

As privacy advocates and technologists we are constantly working on features which we think will improve the user experience of the IVPN apps. Less than a month after the release of the Linux app, we are proud to release a command-line interface (CLI) for the MacOS and Windows apps.

Beta IVPN Linux app released

Posted on April 22, 2020 by Viktor Vecsei

tl;dr: The IVPN Linux CLI app is available for testing - all feedback is welcome. IVPN apps have been available for most major platforms since the release of our iOS app back in 2017. The obvious missing piece was an app for Linux.

Protect yourself today and get peace of mind

Shut out hackers, identity thieves and the global government surveillance apparatus — every time you go online.