Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Quick Unlock passcodes for databases #42

Open
keepassium opened this issue Aug 1, 2019 · 3 comments
Open

Support Quick Unlock passcodes for databases #42

keepassium opened this issue Aug 1, 2019 · 3 comments
Labels
enhancement New feature or request

Comments

@keepassium
Copy link
Owner

Currently, a database can be opened in two ways:

  • By entering a full master password.
  • Completely automatically, using the saved master key.

It might be useful to add a middle-ground solution between these extremes. Specifically, before unlocking the database with the saved master key, ask the user to enter a few first (or last) symbols of the master password. After one failed attempt, fallback to full master password.

[Thanks, u/deviltrombone]

@keepassium keepassium added the enhancement New feature or request label Aug 1, 2019
@itskemo
Copy link

itskemo commented Aug 2, 2019

Considering some may be using a strong master password I propose to prefer using a simple PIN code as a "middle step" - easier and faster to type compared to for example "a5%_" (takes more time + requires the user to switch the keyboard layout a few times)

@Thunder33345
Copy link
Contributor

Thunder33345 commented Aug 2, 2019

what about things like pin/fingerprint lock for the app what's the differences?(in terms in security)

@keepassium
Copy link
Owner Author

@id-kemo, while debugging Quick Unlock in KeePassB, its developer changed his master key to "old_master_key + a few lowercase letters". Just sayin' :)

@Thunder33345, the App Lock is independent from this, it protects the app.

The Quick Unlock password is intended for unlocking the databases, once the app has already been unlocked. It is a time/security tradeoff between the existing options: more secure than automatic unlock, but faster than entering the full master password.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants