Windows Hello prompt still appears even though application settings thinks it is unavailable

[hdatma]

Overview

KeePassXC prompts for windows PIN in addition to database password.

Steps to Reproduce

Go to Tools > Settings > Security > "Enable database quick unlock (Touch ID/ Windows Hello)" the option is pre-enabled by default.

Expected Behavior

The option should not be pre-enabled, expecially on computers where Touch ID/ Windows Hello is not enabled / not available.

A more general option is needed, where the user is automatically logged on the database, with no need to enter any password.

Actual Behavior

KeePassXC prompts for windows PIN in addition to database password.

Context

KeePassXC: latest
Revision: latest

[NOTE]:
Operating System: Windows
Desktop Env:
Windowing System:

[droidmonkey]

If you are being prompted then it is enabled and available. Just disable the option if you don't want to use it.

[hdatma]

If you are being prompted then it is enabled and available. Just disable the option if you don't want to use it.

Did you read the issue?

The option should not be pre-enabled

The user is not prompted to the option.

The option is pre-enabled by your installer, also on Linux where no "TouchID / Windows Hello" is available.

Also, disabling the option by hand on hundreds of computers makes deployment of keepassxc unfeasible for corporate adoption, and there is no powershell one-liner that can fix this for all user accounts on a given pc.

Since you closed the ticket without respect for our problem, I am de-provisioning keepassxc from all our corporate customers.

Good luck with your pet project.

[phoerious]

Wow. Can we stay professional here?
Nothing prevents you from pre-provisioning a default config.

[patch-work]

I confirm the problem with Linux.

This is a photo of how it is on Fedora Linux with default install and up-to-date package: the option "enable database quick unlock (Touch ID / Windows Hello" is flagged by default, despite the fact that Linux does not have "Windows Hello", and IT CANNOT BE REMOVED because the box is not cliccable.

[droidmonkey]

It's not relevant at all on Linux. There is no quick unlock on Linux for 2.7.7.

[patch-work]

Nothing prevents you from pre-provisioning a default config.

Why should I pre-provision KeepassXC to de-select an option that I do not have in Linux in the first place?

Windows Hello does not exist on Linux, so why KeepassXC pre-enables the option?

[droidmonkey]

Just ignore it please, it literally means nothing on Linux

[patch-work]

I confirm the problem also on Windows.

This is a photo of how it is on Windows 10 Enterprise with package version 2.7.6: the option "enable database quick unlock (Touch ID / Windows Hello" is flagged by default, and IT CANNOT BE REMOVED because the box is not cliccable.

[patch-work]

I just upgraded to 2.7.7 using the installer from keepassxc.org, and the option is still pre-enabled by default and not cliccable.

[droidmonkey]

A disabled option means you cannot use windows hello. Thus, the setting is not relevant. If you really really really really want to uncheck the box, open %APPDATA%/keepassxc/keepassxc.ini and add QuickUnlock=false under the [Security] section.

[patch-work]

KeePassXC prompts for windows PIN in addition to database password.

I confirm the problem on my computers.

This issue should be re-opened.

[droidmonkey]

So you are seeing a pin prompt even though the setting is disabled?

[patch-work]

So you are seeing a pin prompt even though the setting is disabled?

The setting IS enabled, as shown in the photos.