search

IJHack / QtPass

QtPass is a multi-platform GUI for pass, the standard unix password manager.
https://qtpass.org/
GNU General Public License v3.0
1.03k stars 162 forks source link

deleting passwords should be restricted #497

Open Emonshr opened 5 years ago

Emonshr commented 5 years ago

when someone wants to delete any password, he should give the paraphrase- or else valuable passwords can be erased if the computer is stolen or something.

issue-label-bot[bot] commented 5 years ago

Issue-Label Bot is automatically applying the label feature_request to this issue, with a confidence of 0.85. Please mark this comment with :thumbsup: or :thumbsdown: to give our bot feedback!

Links: app homepage, dashboard and code for this bot.

annejan commented 4 years ago

when someone wants to delete any password, he should give the paraphrase- or else valuable passwords can be erased if the computer is stolen or something.

Since the passwords are single files on the filesystem, that can still happen. The easiest way to prevent such a thing from happening is using git, either locally or with a remote repo.

Emonshr commented 4 years ago

Or changing the .password-store directory permission, and enforced this from the default configuration?

Plloi commented 4 years ago

Personally I don't think the issue scenario is an issue.

As I see it the tools protection of my data is as wrapper for gpg to handle encryption. I use git to version, backup, and sync my vault across my devices. In the event of PC theft let them delete the vault, at that point those passwords are burned anyway. Change them starting with the most valuable from another device.

Emonshr commented 4 years ago

If my vault/passwords aren't without being backed up elsewhere, something is wrong with my personal data management

Sometimes, backing up is not possible for poor internet connection or hazardous machine. It is better to think about the worst case scenarios. Although, I agree with your point,

If my vault/passwords aren't without being backed up elsewhere, something is wrong with my personal data management

Plloi commented 4 years ago

A Password backup is always possible, even it's on paper

Emonshr commented 4 years ago

@Plloi I will appreciate your effort to write down your randomly generated password.

FSMaxB commented 4 years ago

@Emonshr If it's hard to write down your randomly generated passwords, then there's room for improvements!

https://www.xkcd.com/936/ https://fsmaxb.github.io/correcthorsebatterystaple/

Emonshr commented 4 years ago

@FSMaxB I can;t figure out XKCD things very often. But I will tinker with your interesting :smile: randomly generated password tool later!