browserpass-extension icon indicating copy to clipboard operation
browserpass-extension copied to clipboard

Feature request: rely on Apple's Password Manager Resources for better User Experience

Open yvan-sraka opened this issue 3 years ago • 1 comments

Apple open-source have a repo that contain a bunch of JSON with quirks about how website behave with passwords https://github.com/apple/password-manager-resources I would be very glad if browserpass-extension could rely on some of these to provide a better user experience.

For e.g. I have a password stored twice in my pass store for both https://steamcommunity.com and https://steampowered.com website, which are in fact using the same log in system ("Shared Credentials" quirks).

I could complete this issue with further use cases, or try to investigate what would be accurate to do with these different quirks:

  • Password Rules: Rules to generate compatible passwords with websites' particular requirements.
  • Shared Credentials: Groups of websites known to use the same credential backend, which can be used to enhance suggested credentials to sign in to websites.
  • Change Password URLs: To drive the adoption of strong passwords, it's useful to be able to take users directly to websites' change password pages.
  • Websites Where 2FA Code is Appended to Password: Some websites use a two-factor authentication scheme where the user must append a generated code to their password when signing in.

yvan-sraka avatar Feb 03 '22 10:02 yvan-sraka

That repo is actually quite an impressive effort, thanks for showing it! Will definitely keep an eye.

I think it would be nice to deal with some more low-hanging fruit before investigating this request further, there are several things and PRs that never got enough time to be completed... Including password generation / editing features, without which some of those quirks are not relevant yet...

For reference (not saying that "Shared Credentials" quirk won't be useful - it probably will), but until then you may want to look into symlink approach we recommend, which is compatible with all pass workflows and scenarios, not just Browserpass.

max-baz avatar Feb 03 '22 16:02 max-baz