db passwords again

[S. Daum]

In my VB6 application I would like to implement database passwords. I've
read the FAQ and know how to do this. I don't plan to make this "optional."
In other words, every Access database created by my application will have a
password. There will be a "default" password known to my appliation - but
users may set their own passwords also. It is inevitable that someone will
forget their database password. I see that commerical products are available
to "crack" the password in these cases. Some of this data will be very
important to our customers. Being locked out with no way in is not an
option. These are Access 2000 databases. My question: would you rely on the
fact that commercial products are available to solve this problem - when it
arises? Is so do you recommend one over any other?

Thanks,
Steve

 

[Lynn Trapp]

Drop the idea of using a database password altogether. If you can use a
commercial product to find out what that password is, then so can someone
who is trying to hack your data. Instead, go back to the FAQ and follow the
procedures for setting up User Level security.

--
Lynn Trapp
MS Access MVP
www.ltcomputerdesigns.com
Access Security: www.ltcomputerdesigns.com/Security.htm
Security FAQ: http://support.microsoft.com/support/access/content/secfaq.asp

 

[S. Daum]

Thanks Lynn,

The code referenced on your page does not appear to work for an Access 2000
database. Do you know, did Microsoft improve the security of database
passwords in 2000? Is similar code available that works with Access 2000? I
am reviewing the "standard" procedures for setting up User Level security.
Our application is written in VB. I don't fancy doing something that will
affect they way Access works on the end users machine. They don't even have
to have Access for our application to run.

Steve

 

[Lynn Trapp]

Yes, it is more difficult to unpack the database password from A2K upward.
Michka put that code on his site to, hopefully, stem the tide of people
trying to charge for breaking passwords. I don't know of anyone who has made
code available publically for later versions. Still, my point is that you
shouldn't use the database password at all. It's a virtually useless tool
for securing your data. You should be able to implement the user level
security features from your VB application.

--
Lynn Trapp
MS Access MVP
www.ltcomputerdesigns.com
Access Security: www.ltcomputerdesigns.com/Security.htm
Security FAQ: http://support.microsoft.com/support/access/content/secfaq.asp