You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It seems that every node process can retrieve passwords stored by keytar by our process.
This is a limitation that is described in the keytarbug, and it seems to be a security weakness that software generally does not want to take responsibility for (Chrome, for example).
I think we should keep all passwords secure with a user password.
For example, use the user password as an encryption key.
(I think the link to the Chrome blog is interesting and really important)
The text was updated successfully, but these errors were encountered: