# Nginx logs contains temporary passwords

**URL:** <https://discourse.openondemand.org/t/nginx-logs-contains-temporary-passwords/3606>\
**Category:** Get Help\
**Created:** [July 4, 2024, 6:22am UTC](https://discourse.openondemand.org/t/nginx-logs-contains-temporary-passwords/3606 "2024-07-04T06:22:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lior.amir](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/lior.amir/32/2547_2.png) [@lior.amir](https://discourse.openondemand.org/u/lior.amir)\
**Post date:** [July 4, 2024, 6:22am UTC](https://discourse.openondemand.org/t/nginx-logs-contains-temporary-passwords/3606/1 "2024-07-04T06:22:51Z")

</div>

Hello,

Our security auditor identified temporary passwords being logged by Nginx.  
Is there a way to remove it? does it posses any risk?  
Thank you,  
Lior

[30/Jun/2024:10:36:13 +0300] “GET /pun/sys/dashboard/noVNC-1.3.0/app/sounds/bell.oga HTTP/1.1” 206 8495 “[https://server.X.X](https://server.X.X)./pun/sys/dashboard/noVNC-1.3.0/vnc.html?autoconnect=true&path=rnode%2Fserver.X.X%2F64083%2Fwebsockify&resize=remote&password=nkpDvxxq&compression=0&quality=9&commit=Launch+Desktop” “Mozilla/5.0 (Macintosh; Intel Mac OS X 10\_15\_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36” “X.X.X.X”

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [July 5, 2024, 2:15pm UTC](https://discourse.openondemand.org/t/nginx-logs-contains-temporary-passwords/3606/2 "2024-07-05T14:15:23Z")

</div>

Hi and welcome.

Unfortunately - there’s no way to disable that. It is however, that is a 1 time use password. As soon as we generate and use it, we generate the next password. So even if someone were to capture it, it’s not valid anymore by that time.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/b/bae70bd0ed39a3ae769c2108155f4cb3e9da8385.png) [@system](https://discourse.openondemand.org/u/system)\
**Post date:** [January 1, 2025, 2:15pm UTC](https://discourse.openondemand.org/t/nginx-logs-contains-temporary-passwords/3606/3 "2025-01-01T14:15:26Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.