Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

hidden keyfile input has gone #10944

Closed
bits-fritz opened this issue Jun 21, 2024 · 1 comment
Closed

hidden keyfile input has gone #10944

bits-fritz opened this issue Jun 21, 2024 · 1 comment

Comments

@bits-fritz
Copy link

Overview

Hidden input of keyfile path has gone with version 2.7.9
(at least could not find a preference option to get it back)

Steps to Reproduce

  1. open keepassxc - open database
  2. try to enter path for secret keyfile via keyboard (with hidden chars)
  3. only link for file picker appears wich let everyone see the path you select (for example when sharing your desktop at beamer, video conference etc..
  4. search preference for altering the behaviour fails

Expected Behavior

joice for either entering the path via keyboard or selecting via file picker should appear as did up to version 2.7.8

Actual Behavior

only file picker possible to enter secret keyfile

Context

This makes it impossible to keep the path of the secret keyfile secret in certain environments.

KeePassXC - Version 2.7.9
Revision: 8f6dd13

Qt 5.15.14
Diagnosemodus ist deaktiviert.

Betriebssystem: Arch Linux
CPU-Architektur: x86_64
Kernel: linux 6.9.5-arch1-1

Aktivierte Erweiterungen:

  • Auto-Type
  • Browser-Integration
  • Passkeys
  • SSH-Agent
  • KeeShare
  • YubiKey
  • Secret-Service-Integration

Kryptographische Bibliotheken:

  • Botan 3.4.0

Operating System: Linux
Desktop Env: XFCE
Windowing System: X11

@bits-fritz bits-fritz added the bug label Jun 21, 2024
@phoerious
Copy link
Member

The name and location of the key file isn't secret and the security of your database should not depend on it. But if you let KeePassXC remember the key file, it'll show up as **** next time if you have the option to mask the path enabled.

@phoerious phoerious closed this as not planned Won't fix, can't repro, duplicate, stale Jun 21, 2024
@phoerious phoerious removed the bug label Jun 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants