Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

In-browser password generator does not respect "Also include" saved settings from KeepassXC window #6473

Closed
xenithorb opened this issue Apr 2, 2021 · 3 comments · Fixed by #6529

Comments

@xenithorb
Copy link

Expected Behavior

The in-browser password generator does not incude chars from the "Also include from" list that are saved sttings in the main keepassxc window. This results in potentially creating passwords with unexpected properties.

Current Behavior

Currently, if you set a list of chars that you wish to be added to meet password requirements like say $%^&* - the in-browser password generator function does not include these characters into the in-browser generated password. I have observed that all other settings are carried over from KeepassXC such as length, etc, but not the explicit list of chars.

Possible Solution

Steps to Reproduce (for bugs)

  1. Go to KeepassXC password generator, add a list to the "also include" input box like @#$%&!
  2. Make sure no other special char buttons are enabled, so you should only have alphanumeric chars enbaled by default. Be sure to close the password generator window to save settings
  3. Go to a password entry field with keepassxc-browser
  4. Allow keepassxc-browser to generate a new password on the spot... Click generate a few times.
  5. Notice that none of the special chars you explicitly added are present in the generated material

Debug info

KeePassXC - 2.6.4
KeePassXC-Browser - 1.7.7
Operating system: Linux, Fedora 33
Browser: Chromium, Brave

@droidmonkey
Copy link
Member

droidmonkey commented Apr 2, 2021

We need to either:

  1. Use the pop-up password generator directly from keepassxc (similar to entry edit version)
  2. Incorporate the password tuning controls into the browser view

I vote for # 1

@varjolintu
Copy link
Member

This probably needs a fix to KeePassXC side. The password is retrieved directly from BrowserSettings::generatePassword(). We must make sure all options are included in that function.

mknjc referenced this issue in mknjc/keepassxc Apr 9, 2021
Fixes: keepassxreboot/keepassxc-browser#1297
mknjc referenced this issue in mknjc/keepassxc Apr 9, 2021
Fixes: keepassxreboot/keepassxc-browser#1297
mknjc referenced this issue in mknjc/keepassxc Apr 9, 2021
Fixes: keepassxreboot/keepassxc-browser#1297
mknjc referenced this issue in mknjc/keepassxc Apr 9, 2021
Ignore the advanced character classes when advanced mode is disabled like the PasswordGeneratorWidget does
Fixes: keepassxreboot/keepassxc-browser#1297
@varjolintu varjolintu transferred this issue from keepassxreboot/keepassxc-browser May 2, 2021
@varjolintu varjolintu added this to the v2.7.0 milestone May 2, 2021
@varjolintu
Copy link
Member

Passphrase option seems to be broken too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
3 participants