---
title: Windows Security FAQs for OpenVPN Connect
canonical: https://openvpn.net/connect-docs/windows-security-faq/
product: OpenVPN Connect Docs
---

# Windows Security FAQs for OpenVPN Connect

Wondering about OpenVPN Connect security and best practices? Refer to these FAQs.

## Is OpenVPN Connect vulnerable to Heartbleed?

No, OpenVPN Connect uses the OpenSSL library, which is immune to Heartbleed.

## Why is the save password switch sometimes unavailable?

The save password switch on the authentication password field is typically turned on, but you can turn it off by adding the following OpenVPN directive to the profile:

```
setenv ALLOW_PASSWORD_SAVE 0
```

> **Important**
>
> The above directive only applies to the user authentication password. The private key password, if it exists, can always be saved.

## Does OpenVPN Connect support the tls-crypt option?

Yes, OpenVPN Connect supports the **tls-crypt** option in recent versions.

---

Prev: [Frequently Asked Questions](https://openvpn.net/connect-docs/windows-faq.md)
Next: [Contact Support](https://openvpn.net/connect-docs/contact-support.md)
Index: https://openvpn.net/connect-docs/llms.txt