Android: CVV of bank card not censored

buttercup / buttercup-core

:tophat: The mighty NodeJS password vault

http://buttercup.pw/

MIT License

467 stars 57 forks source link

Android: CVV of bank card not censored #312

Open julianpoemp opened 3 years ago

julianpoemp commented 3 years ago

I created a new bank card entry with the new Buttercup 2.0 desktop client. After it was saved I went into the Buttercup Android app and looked for the newly created entry. I found out that the CVV is not censored, instead the card number is censored.

Shouldn't be the CVV (Pin?) censored instead of the card number?

System: Andorid 11 Device: Samsung Galaxy S21+ App Version: 1.16.0

perry-mitchell commented 3 years ago

Yeah, it's probably because the card number is saved as "password" in the guts of the vault.. So it should probably be changed to avoid password and the CVV set to hidden.