andrew-schofield / keepass2-haveibeenpwned

Simple Have I Been Pwned checker for KeePass
MIT License
423 stars 24 forks source link

[feature request] Option to ignore individual entries #72

Open ccoenen opened 5 years ago

ccoenen commented 5 years ago

I keep a list of classic "PIN" numbers in KeePass as well. They are obviously very weak and all of them are flagged every time. I have no control over these entries (for the most part), and I am aware that 4-digt numbers are baaaad passwords.

But because the list will always return 20 entries, I might miss one or two actual passwords that are actually in danger.

strayge commented 5 years ago

Last update allows to check just specific group. You can move PIN password to another group and don't check it.

It's not enough?

ccoenen commented 5 years ago

Thats an interesting workaround, I'll try that, thanks :-)

In the end, I wouldn't want to group my passwords permanently like that, but for the irregular checking every now and then it's probably OK.

Sanaki commented 5 years ago

I'd say the easy solution would be to respect a specific advanced string field (hibp_nocheck = true or similar) when running checks. In my case I'd like to exempt all instances of "admin", "root", "webmaster", and other common and non-personal usernames.

ccoenen commented 5 years ago

good idea! That's probably more useful than limiting it to 4-digit PIN numbers. One might even add a button to the list "ignore this entry from now on" which would add the custom field.

andrew-schofield commented 5 years ago

This sounds like a duplicate of #43 now I think?

ccoenen commented 5 years ago

Yes, pretty much.