palant / pfp

A simple and secure browser extension to be used with KeePass databases.
https://pfp.works/
Mozilla Public License 2.0
113 stars 14 forks source link

Ability to copy username and website address (and two questions). #101

Closed Auronius closed 5 years ago

Auronius commented 5 years ago

Good day! You have made very good password manager! Thank You! Still I miss the ability to copy username (marked by red line on the screenshot) and website address (blue line) to clipboard, so every time, I have to select them manually, then press Ctrl+С, then click on appropriate browser field, and then press Ctrl+V. This is very inconvenient, especially after autotype usage. I am not asking to add autotype option, but could you please add buttons, which allow to copy username and website addresses to clipboard, just like the button, which copies password to clipboard (green rectangle on screenshot)? Screenshot I miss this ability very much, honestly.

Also I have two questions.

  1. From Your article I have read, that Easy Passwords have used PBKDF2-HMAC-SHA1 algorithm with 262,144 iterations for password generation. Does Pain-free Passwords use the same algorithm, or different? PBKDF2-HMAC-SHA256?
  2. From Here I have read, that The backups are encrypted, so this service won’t know which websites you have accounts on. Which encryption algorithm is used for password database backup encryption?
Maryse47 commented 5 years ago

From Your article I have read, that Easy Passwords have used PBKDF2-HMAC-SHA1 algorithm with 262,144 iterations for password generation. Does Pain-free Passwords use the same algorithm, or different? PBKDF2-HMAC-SHA256?

It uses scrypt (N=15, r=8, p=1).

From Here I have read, that The backups are encrypted, so this service won’t know which websites you have accounts on. Which encryption algorithm is used for password database backup encryption?

AES-GCM.

Both were merged in https://github.com/palant/pfp/pull/63

palant commented 5 years ago

The big challenge here is adding this functionality without overcrowding the user interface.

One question: why do you need to copy the website name? Is the idea going to the website in question or is there another use for it?

Auronius commented 5 years ago

I have a lot of different accounts for forums, web shops, services, and it is impossible for me to remember each website address (around 40). When I try to type web site addresses manually, I often make typos, which lead me to wrong web portals. So I open this menu, click on necessary web site, then select it and copy the website address just like I have written in the first post. So I have two choices. Either type website addresses manually or perform described sequence, which is inconvenient. Storing websites in bookmarks is not an option, because of privacy reasons. As for usernames, the same thing, I can not remember all usernames, especially if I have to choose for account registration some specific and unusual username like Auronius4554 or Aur0niusX instead of Auronius, because Auronius is allready taken by someone. So, I have to manually copy them and paste, which is inconvenient for me. I am sorry, but I do not think, that adding only two buttons for copying website address and username will ovecrowd the user interface. But it will make PFP much more convenient to use. @Maryse47, Thank You for detailed answer.

palant commented 5 years ago

Ok, the point is visiting the site as I thought. Good to know.

I didn't say that I won't implement this. But it does need some thought.

palant commented 5 years ago

Website name is a link now and can be clicked to visit the website.

palant commented 5 years ago

I ended up splitting the "copy" menu item into two:

screenshot