android app - to easy to access passwords
I was really disappointed when I found out that I don't need my master password to access saved passwords in Android app (1.13.5 (51)). I can write anything (as a password) and my name to access these passwords.
The proper default behaviour would be:
- user enters master password a -> passwords connected to that password appear
- user enters master password b -> passwords connected to that password appear
- user enters wrong password -> no password appears
I know there is option to change your settings, but I think this should be the default behaviour, because for me it is intuitive and it is far more safe. Also, if you use these changed settings, I guess you can have only one master password.
Keyboard shortcuts
Generic
| ? | Show this help |
|---|---|
| ESC | Blurs the current field |
Comment Form
| r | Focus the comment reply box |
|---|---|
| ^ + ↩ | Submit the comment |
You can use Command ⌘ instead of Control ^ on Mac
1 Posted by Brian D. on 24 Oct, 2019 06:42 PM
No matter what you enter as your name and no matter what you enter as your master password, the app will open the screen with passwords.
If you look more closely at the displayed passwords, the passwords that show up when you enter your name and the correct master password do not match with the passwords when you enter your name with a different master password.
The passwords that display under the site names after you enter your chosen name and master password are simply calculated. They are calculated every time you enter a name and master password.
Your passwords are not saved they are calculated every time you login with the correct credentials. If you use the incorrect credentials the system will display passwords, but these will not be the same as yours :).
Please anyone correct me if I am wrong with how I understand this awesome system.