search

keepassxreboot / keepassxc-browser

KeePassXC Browser Extension
GNU General Public License v3.0
1.72k stars 176 forks source link

Warn when using breached passwords in Browser #981

Open OLLI-S opened 4 years ago

OLLI-S commented 4 years ago

Feature Description

In an other forum I have read that the password-manager of the Google Chrome browser warns the user when he is logging in using a password that has been breached. So users get a warning and a suggestion to change the password.

When I searched in the web for "google chrome breach password" then I find the following image:

image

This feature increases the security of the passwords a lot because users get a warning while using KeePassXC.

varjolintu commented 4 years ago

You can use KeePassXC to check for password breaches in your database. It could be possible to mark these credentials somehow and show a warning in the browser extension also. But for now, the password breach check in KeePassXC is not automatic, so the feature would be slightly limited anyway.

OLLI-S commented 4 years ago

You can use KeePassXC to check for password breaches in your database.

@varjolintu I know this feature very well, if I remember then it was one of the features that I suggested for KeePassXC.

I suggest a setting where users can activate/deactivate the setting "Breach Check while logging in". If this setting is activated and I log into any website, then KeePass checks the password for this entry if the password has been breached and displays a warning in case of a breached password. I know that for some accounts there might be several passwords be stored in KeePassXC (like two Amazon accounts,, one for me, one for my wife) so here all passwords for the URL should be checked.

varjolintu commented 4 years ago

That could be possible to do. Nice idea.

OLLI-S commented 4 years ago

@varjolintu Thank you!