Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[clipboard] protect sensitive clipboard entries (passwords) #1449

Open
martinengelke opened this issue Oct 3, 2024 · 8 comments
Open

[clipboard] protect sensitive clipboard entries (passwords) #1449

martinengelke opened this issue Oct 3, 2024 · 8 comments
Assignees

Comments

@martinengelke
Copy link

Package source

GitHub

App logs

macOS

Current Behavior

Passwords are going right into the clipboard. I am not sure how to change that, since I tried it as well with Maccy.app and it also saved my PayPal password which is maybe not supposed like that?:

Maccy Website: Maccy respects your privacy. If your password manager removes a copied password from the clipboard, so will Maccy. Everything is stored on your computer.

Expected Behavior

Maybe the Password could not saved in clear form but instead with ************?
Any further suggestions?

Anything else?

No response

@martinengelke
Copy link
Author

Raycast Clipboard Manager says:

Copied content never leaves your computer and is encrypted on your local hard drive. Passwords copied from any password managers and other transient data are ignored by default, ensuring your sensitive information remains secure.

@ManuelSchneid3r
Copy link
Member

Which passwords? How can Albert know if the text copied is a password?

@martinengelke
Copy link
Author

As you read above, others suggest that there is some way. I don't know exactly without taking a deeper dive into google. Since there are special input forms:
Password: ******
They should be somehow recognised (have a certain flag, the clipboard can read out?).

If I find some time I will look for it.

@ManuelSchneid3r
Copy link
Member

ManuelSchneid3r commented Oct 17, 2024

Probably guys at Raycast tell you so because alleged security sells. In fact the clipboard is public. a malicious software needs way less of an effort to get your copied passwords than finding files that somewhere bury this information. not in Wayland though where desktop security really is a thing.

@martinengelke
Copy link
Author

martinengelke commented Oct 17, 2024

http://nspasteboard.org

Maccy Settings:
Bildschirmfoto 2024-10-17 um 14 42 22

@ManuelSchneid3r
Copy link
Member

ManuelSchneid3r commented Oct 17, 2024

So you care about them not being visible on your screen? Because if I got it right this mechanism only protects against “shoulder surfers”. the data is still plain text.

@ManuelSchneid3r
Copy link
Member

Dont get me wrong i like the idea. But we should do it right to not fool our users.

@martinengelke
Copy link
Author

This is why I am here, on the Light Side.
image

Perhaps we can find a better approach, but this seems rather difficult.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants