search

keithamus / LinkyPass

LinkyPass Google Chrome Extension
http://github.com/keithamus/LinkyPass
MIT License
36 stars 15 forks source link

Hash option allows incorrect password entry #3

Closed ghost closed 10 years ago

ghost commented 13 years ago

I'm deliberately typing my master password wrong in a profile stored as hash expecting an invalid verification, but never get such. No matter if my master password is right or wrong, I get a password.

MicahZoltu commented 13 years ago

It will still let you generate passwords, but the master password entry field will be red instead of green if you type it wrong. Are seeing a green master password field? Personally, I like the way it is setup now because I can generate passwords using a different master pass if I want, but I can still use the hash validation for my regular stuff.

keithamus commented 13 years ago

I may use a stronger visual feedback, or perhaps make this an option that is configurable. I myself don't want to be forced down a "password validation on hash" route.

keithamus commented 10 years ago

@cloudmustela @Micah71381 I've reneged on my previous opinion, and in the new 2.0.0 version of SuperChromePass (now called LinkyPass) which is available in the Chrome store now, you are unable to enter a password on profiles that have hash based checks. If you need to enter another password, you can use another profile to enter other passwords, which I think works really well.

The new version is pretty much a full rebuild with a new design, so I'd love to get your opinions on it! I hope you download and use it!