come on, guys, it's Christmas. Time to make people happy! So please support a coammnd-line interface to get passwords from Enpass.

I want to use only one tool.. and this should not be KeePassX.

Releates to:

• December 24, 2018
• September 10, 2018

• May 3, 2017
• November 21, 2017

Thanks and BR
Daniel

Why:

A site I use offers security via Passkey but not TOTP security. A search returned this interesting info:

"Q: Does Enpass TOTP meet <site> FIDO2 certification standard for secure authentication?

A: No, Enpass TOTP does not meet <site> FIDO2 certification standard for secure authentication.

Enpass TOTP generates Time-Based One-Time Passwords (TOTP), which are explicitly described as not recommended for modern, high-security authentication because they are susceptible to phishing, replay attacks, and malware interception.

<site> and other major ... institutions require phishing-resistant methods, such as FIDO2 security keys (hardware tokens) or Passkeys, which cryptographically bind authentication to the specific domain and cannot be intercepted by phishing sites.

FIDO2 standards (WebAuthn) use asymmetric cryptography where the secret never leaves the device, whereas TOTP relies on a shared secret that can be compromised if the server is breached or if the user is tricked into entering the code on a fake site.

While some hardware tokens can support both TOTP and FIDO2 functions, the TOTP feature itself on any device (including Enpass) does not provide the phishing resistance required by FIDO2 standards or recommended by the U.S. government for federal agencies.

Android phones running version 7.0 or higher can function as a FIDO2 security key for Google accounts, allowing users to log in on Windows, Chrome OS, or macOS devices without needing a separate physical token. This feature utilizes Bluetooth and Location data to verify that the phone is in the same location as the computer being used for sign-in, providing phishing-resistant two-factor authentication. "

Please consider the following change request:

The ability to completely clear all password history and for each individual password instance.

Sometimes, after creating a password,  it may not meet the acceptable requirement when updating, and another password needs to be created.  

Having passwords in an items history list that were never successfully used, and having the ability to remove them, would save time and eliminate confusion.  Only passwords that were actually used would populate the history list.

Thank you for considering this request.

Current State:

• Pronounceable Off:

  • Length slider remains as-is

  • Other fields remain as-is

• Pronounceable On:

  • Words slider replaces Length field with length details underneath

Proposed Future State:

• Pronounceable Off:

  • Length field remains as-is

  • Other fields remain as-is

• Pronounceable On:

  • Words slider appears above Length slider to specify word count

  • Length slider remains to indicate maximum character count

For example if the current separator is "Underscore" then the password would be "Correct_horse_battery_staple". Swiching to the "multi" option would result in a password like "Correct_horse,battery$staple", or "Correct-horse.battery staple" or "Correct$horse#battery_staple" etc.

Currently I setup field type of Phone and type 8003334444, but it doesn't format to (800) 333-4444 let alone if I add an extension.

If I type a hyperlink in HTML I can add extensions, but extensions are relatively rare, so I think that could be an additional feature request if you can't find a solution in a reasonable amount of time.

<a href="tel:+441234567,88">+44-123-4567 ext. 88</a>

There are also fields where it auto-formats as you type. This would be ideal, but not necessary. It could auto-format after I finished typing.

http://igorescobar.github.io/jQuery-Mask-Plugin/

• A per-entry whitelist that works like a boolean of "copy both password and otp for this site" consisting of the password and otp concatenated together in the clipboard, with option of Password+OTP or OTP+Password, for some schemes where the OTP is required before or after the password proper,
• A right-click option under "Copy OTP" that allows for "Copy Password+OTP" and/or "Copy OTP+Password", for some schemes where the OTP is required before or after the password proper, or
• Both of these.

I hadn't seen such an option in the desktop client for this, so either I missed it, or it's not there. Either way, great application!

Is this specific to Windows on ARM64? Could we get a natively-compiled version for ARM64?

This is on a Lenovo Slim 7x with the CPU: Snapdragon(R) X Elite - X1E78100

It would be great if Enpass had a simple "plus" button next to the website field that automatically creates additional website fields, with a default name of "Website 2", "Website 3", etc. 

Thank you. 

in my homelab i have a lot of services on my server with the same base ip but lots of different ports.

unfortunately enpass shows me all i have saved and it can be confusing which one to use. especially on my phone because i see only the username (often times admin).

can you please change that?

Regards

Jonas

https://discussion.enpass.io/index.php?/topic/1134-not-compatible-with-wayland/&_fromLogin=1

Are there plans to address this in a release soon?

Can you please make your website Blog compatible with RSS readers? 

Personally speaking, I would like to subscribe to get blog updates with an RSS reader, so that I automatically get notified when you share new posts.

Hope you can make this happen 🙏 

https://www.reddit.com/r/EnpassOfficial/comments/1pylw4j/choose_enpass_in_macos_option_for_set_up_codes_in/

Other users have also mentioned the same issue on Reddit's official channel. If Enpass could be set as the system's sole Autofill provider, it would avoid many conflict scenarios.

I recently got one of the new 8GB/RAM Raspberry Pi models and found it to be a quite nice minimal desktop experience. Unfortunately, I couldn't get very far with the tasks I was hoping to, as Enpass doesn't seem to support ARM on Linux yet.

I'd love to see an ARM build published in the APT/YUM repos - unless I'm thoroughly mistaken about your codebase, it may be a just as simple as recompiling your current Linux build for ARM.

I think over the next few years as we start to see more ARM machines come onto market you'll find more and more developer customers requesting this feature.

Some operational suggestions for a smooth QuickStart:

• AWS offers ARM64 instances you can use for CI/CD.
• The new 8GB/RAM Raspberry Pi is now available for less than $100.
  • They are suitable for "real work" if you prefer to do your dev work locally - I'm even building a Kubernetes cluster of them.

All the best,

Noah

Please can you improve this?

The flag to indicate to match the "full URL" should really be options, specific to each item/site, on whether to match just on the domain name, the full host name (including sub-domains) or the entire URL. That way you can setup intranet sites accordingly (with sub-domains and/or path specific sites) and yet still have internet sites (such as bank, credit card, etc. sites) that only match the domain name so if the website is updated and the URL changes it doesn't get hosed.

I often have 20-30 lines of info in the Notes, and it's SO difficult to read data in such a small area!

Please consider this request in a future edition.