nextcloud / passman-android

:key: Android app for Passman.
https://passman.cc
GNU General Public License v3.0
92 stars 30 forks source link

cant log in to my vault #122

Closed grochib closed 9 months ago

grochib commented 2 years ago

Hey,

I just started using passman on Nextcloud (22.2.5 on Docker compose, no newer version available yet) and my first trial with the app went great. I was able to install the app, log in with the specifically created app-password (i'm using 2fa) and open the vault with the credentials I set it up with. Then today suddenly I could not open the vault from within the app anymore: I was able to start the app, the vault was visible but when trying ot access it the app said: wrong password. I tried from within my nextcloud webpage: it worked just fine. I tried open the nextcloud on the same android phone (using mobile network, not wifi): again I could log in to my vault without problem. I tried so far:

Each time the same error appears, see here: Screenshot_20220321-121218

I'm a bit lost. Can anybody give me a hind on where I might do smtg wrong? thank you so much!

binsky08 commented 2 years ago

Hmm, have you tried to write the password in a plain text field of an other app and copy & paste it into the password field? (just to be sure it is no typing error)

May I sould add a password/plaintext toggle button xD

grochib commented 2 years ago

Thank you so much for the quick reply!

I tried that one as well, each time with every password. Is there a cache to be deleted before trying it with a new password?

Or do you know of a way of debugging the communication between the app and my nextcloud?

Timo Triebensky @.***> schrieb am Mo., 21. März 2022, 15:13:

Hmm, have you tried to write the password in a plain text field of an other app and copy & paste it into the password field? (just to be sure it is no typing error)

May I sould add a password/plaintext toggle button xD

— Reply to this email directly, view it on GitHub https://github.com/nextcloud/passman-android/issues/122#issuecomment-1073949075, or unsubscribe https://github.com/notifications/unsubscribe-auth/ANEK3XTCBXWSQYH7GIB6QC3VBB7YDANCNFSM5RHMJK2Q . You are receiving this because you authored the thread.Message ID: @.***>

binsky08 commented 2 years ago

The main communication between the app and your nextcloud is downloading the encrypted vault data. The app validates the vault password by trying to decrypt the first credential in the vault (not your first one by default, but one automatically created for it). So this password check requires a vault "refresh" (there's a button in the app) after changing the vault password via the web interface.

Debugging the communication between the app and your nextcloud could be difficult due to https.

grochib commented 2 years ago

Hey, I might have found the reason why I cannot log in to my vault: I created a new vault, exported the passwords from the old vault to import them in the new vault. I could open this new vault on my passman app without problem.

Then I wanted to delete the old vault but I couldnt because (as it seems) I have shared one password with another passman user on my nextcloud (another nextcloud user). After deleting the share of that password I suddenly could open the old vault in the app.

So I did the same thing with the new vault: sharing the same password with the other nextcloud/passman-user (the user is not available at the moment) and again the app said "wrong password" for the new vault. Deleting the share I could enter the new vault again.

So somehow sharing passwords on the same nextcloud instance breaks the possibility of the passman app to open vaults. I cannot believe I was the first sharing passwords so I might have done smtg wrong?

Any idea?

Thank you so much for your kind help!

Am Mo., 21. März 2022 um 18:58 Uhr schrieb Timo Triebensky < @.***>:

The main communication between the app and your nextcloud is downloading the encrypted vault data. The app validates the vault password by trying to decrypt the first credential in the vault (not your first one by default, but one automatically created for it). So this password check requires a vault "refresh" (there's a button in the app) after changing the vault password via the web interface.

Debugging the communication between the app and your nextcloud could be difficult due to https.

— Reply to this email directly, view it on GitHub https://github.com/nextcloud/passman-android/issues/122#issuecomment-1074233123, or unsubscribe https://github.com/notifications/unsubscribe-auth/ANEK3XWRNUCSEIMYBKIC4ATVBC2DTANCNFSM5RHMJK2Q . You are receiving this because you authored the thread.Message ID: @.***>

binsky08 commented 2 years ago

Unfortunately I could not reproduce the problem

binsky08 commented 9 months ago

could not reproduce