Kunzisoft / KeePassDX

Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure way.
https://www.keepassdx.com/
GNU General Public License v3.0
4.55k stars 269 forks source link

It is recommended to add a password retrieval function. I have thought of two solutions, with picture explanations. #1788

Open nichousha123 opened 6 months ago

nichousha123 commented 6 months ago

The following is from Google Translate

Suggested addition: Retrieve password settings (remediate forgotten password digits by setting custom questions and answers)

Here's why

Over time, boring numbers are forgotten, but some people or things are not, such as the name of a parent, the name of a first love. In order to make you understand what I am thinking, I have created the relevant settings page in Excel

After the database is decrypted, open "Settings" and click "Retrieve Password Settings", where you can set custom questions and answers, click Confirm to complete the setting (as shown in Figure 1) 找回密碼設置

Option 1 (Figure 2)

In the first scenario, only the password is set, and the key ID is not detected after the database is opened (for example, the key ID is: 0X23. Just like a data packet) will automatically decrypt the problem, and after entering the correct answer, you will get the password number 最終1

Option 2 (Figure 3)

The second solution is a password + key combination. After opening the database, it detects that the key identifier (key identifier data header: 0X23) needs to import the key before the "custom question" can be decrypted, and the password number will be obtained after entering the correct answer 最終2

J-Jamet commented 6 months ago

There's no point in putting this kind of functionality locally, as it would mean storing credentials locally along with other credentials created from answers to recovery questions.

This makes sense with server-based technology, but not here.

You might as well put the answer to the recovery question directly in the password field if that's the information you want to remember.