palant / pfp

A simple and secure browser extension to be used with KeePass databases.
https://pfp.works/
Mozilla Public License 2.0
113 stars 14 forks source link

Suggestion: option to show master password #132

Closed David263 closed 1 year ago

David263 commented 1 year ago

I suggest an "eye" icon or some other way to make the master password prompt visible while typing. Some of us are older and cannot type strings accurately without being able to proofread what we type. It should be OUR choice whether to make a password visible, not YOUR choice. By making that decision, we imply that nobody is looking over our shoulder and that we take responsibility for our computer's security.

palant commented 1 year ago

Please note that I’m winding down PfP as I can no longer maintain it. Exactly when and how is still to be decided, but I’m definitely not going to implement improvements.

David263 commented 1 year ago

Dear Palant, Thanks for letting me know. I will stop evaluating it for my use.

May I please take this opportunity to say how impressed I was with your design of how PfP works and how it handles password security. It is true that I did find some minor problems with the program, but such maintenance is always needed for any software, because of the fluid and permissive nature of software as compared with hardware. I'd like to thank you for doing this work and express my deep regret that you aren't still committed to it. Any software offered to the public will need support. If you look at how LastPass supports its product, you will see how poor a job they do. At least you read and respond to problem reports in a timely way, even though you've become sick of working on it! And much of your product meets a real need, and meets it in a flexible way, supporting both automatic and manually-specified passwords as it does.

I have tried creating my own password manager, based on the idea of the customer writing a little bit of JavaScript code for each website, for ease of customization by knowledgeable users. But I've found that Web extension programming is very difficult to debug and works differently between different browsers. It is not yet standardized.

Please don't let this failure stop you from future software tools development--you have a real talent for it. Thank you again.

David Spector, President Springtime Software 38 years in software engineering for companies large and small Retired in 2000 and now a hobbyist.

palant commented 1 year ago

I guess PfP will live on a bit longer after all, albeit in a quite different form – it requires an external application and stores data in the KeePass format now. So this change has been implemented in PfP 3.0.

This new release is a separate extension, not an update to PfP 2.x. So it will take some time until it is available in all extension stores. It’s there for Firefox now, Chrome review is still ongoing, and I cannot upload to Opera Add-ons as long as PfP 2.x isn’t updated.