IJHack / QtPass

QtPass is a multi-platform GUI for pass, the standard unix password manager.
https://qtpass.org/
GNU General Public License v3.0
1.03k stars 162 forks source link

Default password visibility #511

Closed eloydegen closed 4 years ago

eloydegen commented 4 years ago

After I installed QtPass, the passwords from my already existing pass store are visible by default. I'm not sure if this is an intentional choice or a bug, but I don't think there are any other popular password managers who have this behavior. I think the default setting should be changed to hide them by default. Any thoughts about this?

annejan commented 4 years ago

Since QtPass is just a GUI client for the pass ecosystem, this is by design. Why should the client make it harder to use pass instead of easier?

The exact same thing happens when you install passmenu, passff, upass or any other client from https://www.passwordstore.org/#other

With regard to other clients, as far as I know installing Keepass and KeepassX will list your passwords in either client too . .

eloydegen commented 4 years ago

I just checked KeepassX, it hides your password by default while there is a button next to it to make it one time visible. This feature would make it by default more secure against shoulder surfing. This is not really a problem with very long randomly generated passwords, but quite less with passphrases. Thankfully, there is already an option to hide them, but I think it should be the default.

If this would be set to the default, I think QtPass also need a button because otherwise you would have to copy the password to another application to make it actually visible.

image

annejan commented 4 years ago

Ahhh . . Yes . . we have that option Screenshot 2020-02-24 at 12 05 10 Might be smart to make it a default (and add the show button)

annejan commented 4 years ago

Wizard now has: ui->checkBoxHidePassword->setCheckState(Qt::Checked); NB: This only works with a clean install (default) of course 😉 Screenshot 2020-02-24 at 16 54 35 But this is there for you when you enable ☑️ Hide Password Screenshot 2020-02-24 at 16 54 45