2 respostas
Hi Diandre,
At work we have gone through an PCI auditory last month. I am using 2 different salesforce extensions and our Security Expert told us that if they stored passwords without encryption we would have an issue.
Good thing is that the one I am using (Force.com logins) can encrypt the data, you can find this feature on settings.
So my suggestion is: If you have to input credentials and they are not encrypted, do not use it.