belaviyo / keepass-macpass-helper

A helper extension to use KeePass/MacPass/KeePassXC from Firefox, Opera, and Chrome browsers
https://webextension.org/listing/keepass-helper.html
Mozilla Public License 2.0
103 stars 27 forks source link

No action after "Allow" #21

Open Olifair opened 6 years ago

Olifair commented 6 years ago

Situation : I'm on a webpage that needs a login and a password, both field are visible, I have the password in my Keepass, including the URL When I click on the KeePassHelper button in Firefox, I get the black pop-up window with a timer waiting, I get a pop-up window from KeePass asking for Allow or Deny for this specific web page (so the correct entry has been found). When I click on "Allow", both pop-up windows close and nothing is happening.

I'm using Firefox 59.0 and Keepass 2.38

Additional question : should the URL in KeePass include "https://" or not ? do I need the complete URL or just the main part ? For example which is the correct way to store the URL in KeePass with the following example : https://xyz.submit.net/cgi-bin/main.plex https://xyz.submit.net/cgi-bin/ xyz.submit.net/cgi-bin/main.plex https://xyz.submit.net xyz.submit.net

Thanks for any help, I'm just discovering this really usefull utility

Cheers

Oli

Faxn commented 6 years ago

Click the "remember" checkbox on the popup from keypass and then start over from the toolbar button with keepass-macpass-helper.

Olifair commented 6 years ago

So this means that no webpage will work the first time ? That I need to remember all web pages to which I would like to use keepass-helper to login ? What does "remember" mean in terms of saving information within KeePass-helper ? Cheers

Oliver

Faxn commented 6 years ago

It's a security thing. It means "Remember that Keepass-helper is allowed to view information about this entry." It adds a field to the advanced tab of the entry called "KeePassHttp Settings" with the name of the site.

There is even an option in keepass-http settings to skip this check and allow all connected apps access to everything in the database, but it's use is not recommended(by KeePassHttp).

Also it shouldn't matter whether or not you include the https. I usually just use the smallest identifying domain because websites move logins sometimes. So either xyz.submit.net or submit.net depending on what significance xyx has. Mostly if a abc .submit.net exists that would either need a different account or be controlled by a different organization I would include the xyz.

Olifair commented 6 years ago

Great, thanks for the tips and responses, very usefull :-) OT : Any idea how I get my saved PWD out of FireFox ? There seem to be 3rd party apps, but how sure can I be about what they do with my pwd ?

belaviyo commented 6 years ago

Any idea how I get my saved PWD out of FireFox ?

https://support.mozilla.org/en-US/kb/password-manager-remember-delete-change-and-import#w_viewing-and-deleting-passwords

maxximino commented 1 year ago

What if, especially for some passwords, I prefer not to remember and get an additional popup from KeePassXC itself everytime?