pfn / passifox

Extensions to allow Chrome and Firefox (4.0+) to auto form-fill passwords from KeePass (requires KeePassHttp)
GNU General Public License v3.0
904 stars 185 forks source link

Add a generate password option (Chrome) #122

Closed arneee closed 11 years ago

arneee commented 11 years ago

The new feature for adding new entries to the database is already great. But for now, I still have to generate a new password within KeePass.

It would be great to have a simple password generator feature which fills out the password and password-repeat fields.

If that is too complicated, the password could simply be stored in the clipboard so I can paste it to the fields.

lsgd commented 11 years ago

Sounds good, but what do you expect as workflow for the user? How should it work for an user? Right-click on the password-field? Button in the password field? Button in the popup?

Tell me more how you expect it is working. Thanks.

arneee commented 11 years ago

Easiest solution (without workflow): Add a "Generate password button" in the menu that pops up if you click the chromeIPass button in the Chrome toolbar. Copies generated password to clipboard.

The right click in the password field also sounds good. That would fill out the password (+repeat) and copy the pass to the clipboard (in case something is not working during saving the new entry in KeePass).

Phloks commented 11 years ago

Google is also working on a feature for Chrome that automatically create passwords for users:

http://www.chromium.org/developers/design-documents/password-generation

pic

Maybe the extension 'Lazarus: Form Recovery' is also helpful, because it uses a similar implementation for textfields.

v3.05:Unbenann22t v3.2:Unbenannt

I think that v3.2 have a little bit better implementation, because the botton is outside the textfield.

lsgd commented 11 years ago

The next version implements a password-generator. In chromeIPass go to Options and activate the password-generator (it is disabled by default) You have to also update KeePassHttp for the generator.

A request is send to KeePassHttp and this generates a password which is based on the default profile in KeePass. The default profile is called "(Automatically generated password for new entries)". The returned password will be displayed in a dialog and you can auto-fill it into the fields or/and copy it to clipboard. The generator also detects if the generated password is too long for the password-field and automatically cuts the password and informs you about this change.

cip-pwgen

The new version of KeePassHttp is already available. The new version of chromeIPass will be available in the Google WebStore soon and should automatically update to the new version.

lsgd commented 11 years ago

An addition: The generated password is saved nowhere! You have to save it in KeePass! chromeIPass supports remembering credentials, but it's a workaround for Chrome which does not work everytime! Therefor I really recommend to copy the password to clipboard too!

The known limitations for remembering credentials are 1) In popups without button-bar (chromeIPass-icon not visible) it does not work 2) website internal code denies firing events for chromeIPass which are needed to catch the credentials (submit-event is not fired) 3) website internal code copies the password and clears the original password field --> chromeIPass is no longer able to catch the password

This is because Chrome does not offer an API for working with the password-manager and because of this the Remember-Credentials-function is a site-related workaround which works in most of the cases.

A known page where it is not workign is https://www.tumblr.com/login If someone get it to remember credentials --> please open a new issue or pull-request ;-)

For discussion of the limitations --> Please open a new issue! This issue should only be used for the feature PasswordGenerator

arneee commented 11 years ago

Wow, thanks a lot! Thats great already. That will definitely help me to not use my standard password anymore because I'm too lazy to create a new entry in KeePass everytime!