Terminals icon indicating copy to clipboard operation
Terminals copied to clipboard

Credential Manager security concern

Open csrowell opened this issue 7 years ago • 1 comments

Credential Manager's Manage Credential window doesn't prompt for the Master Password when clicking the "show password" (eyeball) button. I realize that if you have the app open on your computer and leave your workstation unlocked it is bad because anyone can stand at your computer and connect to anywhere they want, but the fact they could completely walk away with all of your passwords seems like a much more serious security issue. It could be fairly easily mitigated by prompting for the user to enter the Master Password before revealing the password.

csrowell avatar Feb 28 '18 14:02 csrowell

This may open discussion, users should follow secure best practices. Sure, most applications like Chrome and others ask for password to show all other passwords. Lets vote, if this is required by others.

jirkapok avatar Sep 02 '18 20:09 jirkapok