Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

store password: inform about security (standalone app) #940

Open
1 task done
kolAflash opened this issue Dec 23, 2024 · 0 comments
Open
1 task done

store password: inform about security (standalone app) #940

kolAflash opened this issue Dec 23, 2024 · 0 comments

Comments

@kolAflash
Copy link

Prerequisites

  • [?] Tried the most recent nightly build
  • Checked if your issue is already reported.

Is your feature request related to a problem?

As described in issue 202 I'd like to see some information for the user on how a password is protected when stored in the standalone app.

Describe the solution you'd like

I'm actually quite happy with the information provided in the Thsmi's comment in issue 202.

I wouldn't use the text _"Your password will be most likely stored in a reasonably secure way...". But instead I'd put in a link "Security Details", linking to exactly that comment in issue 202. Or maybe copy that comment into a Wiki article.

The important thing for me is:
"Stores the password via Electron's Safe-Storage mechanism."
And maybe additionally:
"Electron / Chromium will encrypt the password via the wallet provided by your operating system. The actual security depends on the configuration of your operating system. Please check the Electron Safe-Storage documentation for details on which wallet mechanism will be used for your operating system. And then continue on reading the operating system's documentation for how to configure it's wallet."

I'd consider that pretty helpful. And at least it tells you, that your password won't be simply saved as plain text.

(I hope creating a new ticket instead of continue writing in the old ticket is what you - Thmsi - liked me to do)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant