» ISP News » 
Sponsored Links

UK ISP Eclipse Internet Fails to Hide User Password via Account Page

Tuesday, Jan 21st, 2014 (2:14 pm) - Score 1,236

Internet providers take note; a wide gaze is being cast across your security measures. The latest ISP to feel the heat is KC’s sibling Eclipse Internet, which makes no attempt to hide their customer’s user password when they login to check the broadband providers online account pages.

Admittedly this isn’t nearly as bad as KC’s own recent engineer security gaffe (here) or EE’s hacked-to-bits router shenanigans (here), yet it is still a problem and one that the ISP itself appears to have no problems with.


A Spokeswoman for Eclipse Internet said (The Register):

Customers can view their password within our secure Eclipse customer portal only after they have logged in using their user name and password to authenticate their details. During the login process the password is not visible in plain text.”

Most reputable ISPs know that the password field in any form should generally be replaced with stars (not shown as plain text), unless the end-user specifically elects to uncover the field (web browser often give this option when typing your password into a box). One reason why this is desirable is to help prevent over-the-shoulder style data snooping by a third party.

But in Eclipse’s case the user password (note: not DSL password) becomes visible to anybody looking at the monitor when customers browse to their “User Details” page. We’re sure that Eclipse aren’t the only company to make little mistakes like this and it can make life easier for the user, although it’s also a risk and a few simple tweaks might easily make the form more secure.

Meanwhile as a rule we’d always recommend not even accessing private pages or account details until you’re on a home PC where the environment is hopefully more controlled. At the end of the day nothing is 100% secure but a little prudence goes a long way to keeping your vital data safe from prying eyes.

Share with Twitter
Share with Linkedin
Share with Facebook
Share with Reddit
Share with Pinterest
By Mark Jackson
Mark is a professional technology writer, IT consultant and computer engineer from Dorset (England), he also founded ISPreview in 1999 and enjoys analysing the latest telecoms and broadband developments. Find me on X (Twitter), Mastodon, Facebook and .
Search ISP News
Search ISP Listings
Search ISP Reviews

Comments are closed

Cheap BIG ISPs for 100Mbps+
Community Fibre UK ISP Logo
Gift: None
NOW £24.00
Gift: None
Virgin Media UK ISP Logo
Virgin Media £26.00
Gift: None
Vodafone UK ISP Logo
Vodafone £26.50 - 27.00
Gift: None
Zen Internet UK ISP Logo
Zen Internet £28.00 - 35.00
Gift: None
Large Availability | View All
New Forum Topics
Cheapest ISPs for 100Mbps+
Gigaclear UK ISP Logo
Gigaclear £17.00
Gift: None
BeFibre UK ISP Logo
BeFibre £19.00
Gift: None
Community Fibre UK ISP Logo
Gift: None
YouFibre UK ISP Logo
YouFibre £22.99
Gift: None
Hey! Broadband UK ISP Logo
Gift: None
Large Availability | View All
The Top 15 Category Tags
  1. FTTP (5720)
  2. BT (3569)
  3. Politics (2602)
  4. Openreach (2342)
  5. Business (2323)
  6. Building Digital UK (2277)
  7. FTTC (2061)
  8. Mobile Broadband (2039)
  9. Statistics (1830)
  10. 4G (1724)
  11. Virgin Media (1674)
  12. Ofcom Regulation (1494)
  13. Fibre Optic (1426)
  14. Wireless Internet (1417)
  15. FTTH (1383)

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms , Privacy and Cookie Policy , Links , Website Rules , Contact