Overview

CloudFix is dedicated to ensuring the security of its user data, especially when it comes to sensitive information like passwords. This article provides insights into how CloudFix protects the passwords of its users.

Note that this information only applies to users of the CloudFix portal.

CloudFix doesn't use passwords or any other credentials to connect to your AWS Infrastructure (it uses IAM roles instead). See: CloudFix Authorization/Permissions in Customers' AWS Environments. 

Cloudfix never accesses passwords of the users of your AWS infrastructure See: What Client Information is Held by CloudFix and for How Long?

 

Information

Authentication System

CloudFix uses AWS Cognito for authenticating users who log into the CloudFix portal at app.cloudfix.com.

 

How Password Login Works

AWS Cognito, the authentication backbone for CloudFix, is the system of record for user passwords. When you log in at app.cloudfix.com, your password is submitted over an encrypted (TLS) connection to the CloudFix API, which passes it on to Cognito to verify your credentials. Cognito never stores passwords in a form that can be retrieved or exposed — it stores only a hash, and that hash is what is checked on every login.

 

How Passwords Are Protected

• Instead of storing user passwords directly, AWS Cognito stores a hash of the password.
• This hash allows the system to confirm the authenticity of user credentials without ever storing the actual password.
• Your password is transmitted only over an encrypted (TLS) connection — from your browser, to the CloudFix API, to Cognito — during login and password-change operations.

 

Are Passwords Hashed?

Yes. AWS Cognito never stores passwords directly — it keeps a hash of the password, ensuring that even in the unlikely event of a data breach, user passwords remain protected.

 

Conclusion

CloudFix prioritizes user security by leveraging AWS Cognito for authentication, ensuring that passwords are transmitted only over encrypted connections and are never stored in a vulnerable manner. Users can be confident in the safety and confidentiality of their login credentials when accessing the CloudFix portal.