search

keepassxreboot / keepassxc

KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
https://keepassxc.org/
Other
20.17k stars 1.42k forks source link

My Database password changed somehow by Database Settings automatically #10848

Closed linuxtopia closed 1 month ago

linuxtopia commented 1 month ago

Overview

I think the title of the issue/bug is obvious to get what happened. Unfortunately I lost the password due to auto assigned password by KeepassXC. I had just want to change my database name, changed and then clicked ok a popup appeared about weak password notice but never typed to password section. Even clicking on "Cancel" that process gone and my password changed somehow automatically!

Thanks to my local backup I recovered my database but because of this annoying issue I had to shred my cloud backup in cryptomator vault. But now when I try to reproduce it just ask "continue without password". Hovering-clicking Security/Password has a serious risk to loose credentials for other users too.

Steps to Reproduce

  1. Database
  2. Database Settings
  3. Misclick Security > Password section
  4. General
  5. Database Metada
  6. Change Database Name
  7. Click OK

image

Expected Behavior

There MUST be check mark against mistype/misclick on Security tab for password changing against this kind of losses.

image

For just visiting Security tab and password section that activates password changing then KeepassXC assumes that you want to / changed it then tries to save over your password.

Actual Behavior

Context

KeePassXC - Version 2.7.8 Revision: f6757d3

Qt 5.15.8 Debugging mode is disabled.

Operating system: openSUSE Leap 15.5 CPU architecture: x86_64 Kernel: linux 5.14.21-150500.55.65-default

Enabled extensions:

Cryptographic libraries:

Operating System: Linux- openSUSE Leap 15.5 Desktop Env: KDE Windowing System: X11

droidmonkey commented 1 month ago

Fixed for 2.7.9: #10821

droidmonkey commented 1 month ago

FWIW, we won't show the view you screencapped unless you actively click on the button "Change Password"

image

due to auto assigned password by KeepassXC

We don't do that

linuxtopia commented 1 month ago

I thought a bug caused it. Great to see an enhancement on this issue with new version. Keep it up guys XC is the best client for Keepass.

Thanks