At one point in time, I decided to move all my passwords to a password manager, because beforehand, I would use the same password for everything, and that's not very secure. As I was doing this for Audiotool however, it didn't prompt me to save my password in the manager and I almost lost access to the account. Luckily, all generated passwords are saved locally to the machine and I was able to figure it out. While doing so, I came across an unfortunate exploit that is necessary for Audiotool to patch as soon as possible.

‍‍‍‍‍ 

Despite me being lucky enough to get access back to my account, I had to try over 10 or 15 unique different passwords beforehand, many of which I attempted multiple times. In this regard, Audiotool.com has unlimited password attempts which is really really bad. Attempts should be limited and require precautionary measures such as catchpas in order to continue. Taking this into consideration, this could be exploited to create automated processes to "hack" users' passwords and that's no fun for the receiving end. Precautionary measures often break automated processes from continuing because they often can't be solved by them

​

Post also on https://www.audiotool.com/board/bug_reports/audiotool_com_security

​

Help by saying "I Like this" in the comments.