Where and how is the AES key safely stored then, in order to decript the encrypted password? Or upon choosing to save a password we have to enter a master password?
I am new to pgAdmin and PostgreSQL. I am configuring a new server connection and I can see there's an option to save my server's password.
How secure is this option? Does it save my password as plaintext or does it save inside Windows protection or other form of encryption?
It uses AES encryption in CFB8 mode provided by the Python encryption module. The data is then base64 encoded and stored in the SQLite configuration database that holds user settings.