Author Topic: master password verification  (Read 43370 times)

Offline ThePythonicCow

  • Normal Members
  • *
  • Posts: 6
master password verification
« Reply #15 on: September 23, 2006, 08:44:50 PM »
Quote from: Thibros
I verify my master password this way, especially on the online forms:
After entering the master password, and the URL field being blank, the generated password is always the same, and I recognize it.
You said "the URL field being blank".  It's not blank for me - it's whatever URL my web browser is looking at.
Could you describe a little more precisely what screen you're on, and by what keystrokes you got there?

This sounds like a useful way to verify I've got my master password right, but currently it is inconvenient
for me, as it seems I have to manually clear the URL field.  What's worse, I'm not usually even on the
screen that has this "using URL" field to clear it.  I'm usually on the Alt-` "Master Password Prompt" screen
that doesn't have a "using URL" field.

I must be missing something.

Offline ThePythonicCow

  • Normal Members
  • *
  • Posts: 6
master password verification
« Reply #16 on: September 23, 2006, 11:02:42 PM »
Quote from: Eric H. Jung
... Hence this feature request... which has already been added to the list, so there's not much need to discuss whether or not it's valuable or not. I understand that it is.
Aha - this discussion led me to another way of meeting this need, that might be easier to code,
and more pleasing to use.

On the Alt-` Master Password Prompt window, display the results of encrypting the empty
string using the entered master password.

Then each time I entered my Master Password, I'd glance at the encryption of the empty
string, to be sure it came up as I expected.

This would really confuse someone looking over my shoulder.  They'd see me type one
thing, see a password-like word cycle through variations as I type, and the asterisks in
the actual web form would be hiding an entirely different string, that incorporated the URL.

Offline Eric H. Jung

  • grimholtz
  • Administrator
  • *****
  • Posts: 3353
master password verification
« Reply #17 on: September 25, 2006, 03:49:21 PM »
Quote
This would really confuse someone looking over my shoulder.
Wouldn't it confuse newbies, too?  I'd rather just stick with the original idea. What do you think?

Offline morguns

  • Full Member
  • ***
  • Posts: 145
master password verification
« Reply #18 on: September 26, 2006, 02:27:41 AM »
huh? i think i'm confused.... :)

Offline tanstaafl

  • God Member
  • ******
  • Posts: 1363
Re: master password verification
« Reply #19 on: August 08, 2007, 03:10:44 PM »
Ok, this old one was actually a duplicate of the Option to store MPW's hash to disk/memory - so marking as such, and migrating votes...
« Last Edit: August 28, 2007, 04:18:48 PM by tanstaafl »

Offline tanstaafl

  • God Member
  • ******
  • Posts: 1363
Re: master password verification
« Reply #20 on: September 28, 2007, 11:26:27 PM »
Ok, the new 1.7 release fulfills this FR, so am closing it out...

So, the following get one vote back:

Felipe, BHiko, ThePythonicCow, forbin, John Liebson and popmonkey

PasswordMaker Forums

Re: master password verification
« Reply #20 on: September 28, 2007, 11:26:27 PM »