Feature requests

The ability to have Enpass: 1. "Open Minimized at System Startup" I.e. Slider in Settings. 2. Prompt during initial setup after installation, that asked for Auto Backups NOT be saved on local drive by default or a backup prompt stating a Backup Reminder to a USB, external drive or partition etc. In the event of system Failure, Virus Attack, Corrupted/Damaged HD etc, for recovery purposes. Thank you.

My limited understanding is that HOTP is very nearly the same protocol as TOTP, but instead of using the current time as a parameter uses an incrementing counter. Could this be implemented as well? I'm getting tired of needing Duo installed on my phone. This is a feature I would pay for (I've already paid, but an upgrade wouldn't by objectionable here). I've searched as best I can, and I don't believe Enpass supports HOTP at all. I can find few references here on the forum or elsewhere, they all indicate it is not yet supported.

I would like to be able to merge duplicate items. Sometimes only the URL is different, while in other cases the username is different (for example, logging in with an email versus a username).

The sync icon in the new UI is very small and almost blend in into the background. See the red arrow to see the tiny, almost invisible sync icon in the new UI. If i remember correctly the icon with the green arrow animated when Enpass synced when one had done an edit or added/removed an item. This was great and clear. Please make the new sync-icon larger and give it a clear green color or restore the old sync-icon/behaviour to the animated icon. (green arrow on the image). I prefer the latter but am happy if the current icon gets bigger and change color to something that is easier too see.

Hi, Any possibility to add other cloud service provider such as NordLocker, pCloud Drive or Proton Drive for sync with Enpass? I did read that Proton Drive is part of your roadmap but no news since then.

Team, our organization uses Enpass Business. We do NOT permit synced passkeys and enforce device-bound passkeys via M365 / Entra. (If a passkey can be synced, it can be exported and exfiltrated and phished. Synced passkeys are not much safer than passwords.) Unfortunately, each time we try to create a device-bound passkey with a service, Enpass always interrupts. So we need to close Enpass before we can repeat the process to use Windows Hello or a YubiKey to store new passkeys. Please give us a switch that turns passkeys in Enpass OFF, while maintaining all the safe credential storage capabilities. Also: give us org-wide control over this via policy in Enpass Console. Tha…

Please add an OPTION to have NOTES ALWAYS VISIBLE like the previous verison of ENPASS DESKTOP supported.

Hi, there is a new standard to securely move data between password managers, crucially including passkeys. I would love for Enpass to support this. Is this already planned? See this link for more information: https://hachyderm.io/@rmondello/116370932413267231

Hi, It seems I have too many identical passwords being detected and when I check some of them belongs to an SSO type of logins for different corporate sites. Is it possible to get these to be merge or something to remove them of being identified as 'Identical". Maybe a toggle option as its SSO password or something.

Hello together, come on, guys, it's Christmas. Time to make people happy! So please support a coammnd-line interface to get passwords from Enpass. I want to use only one tool.. and this should not be KeePassX. Releates to: December 24, 2018 September 10, 2018 May 3, 2017 November 21, 2017 Thanks and BR Daniel

Any plans for Enpass to support FIDO2? Why: A site I use offers security via Passkey but not TOTP security. A search returned this interesting info: "Q: Does Enpass TOTP meet <site> FIDO2 certification standard for secure authentication? A: No, Enpass TOTP does not meet <site> FIDO2 certification standard for secure authentication. Enpass TOTP generates Time-Based One-Time Passwords (TOTP), which are explicitly described as not recommended for modern, high-security authentication because they are susceptible to phishing, replay attacks, and malware interception. <site> and other major ... institutions require phishing-resistant methods, such as FIDO2…

Can we please have a dismiss button for that huge "enable Touch ID / Windows Hello" box on the start page? If people don't want to use it, they shouldn't be greeted with this every time they open the app.

Hello Team Enpass… Please consider the following change request: The ability to completely clear all password history and for each individual password instance. Sometimes, after creating a password, it may not meet the acceptable requirement when updating, and another password needs to be created. Having passwords in an items history list that were never successfully used, and having the ability to remove them, would save time and eliminate confusion. Only passwords that were actually used would populate the history list. Thank you for considering this request.

The current password generation process allows you to toggle between pronounceable passwords and not. When not using pronounceable passwords, you can specify the total length of the password which is handy for taking advantage of the full length of the password field. However, when not using pronounceable passwords, the length slider changes to a Word count slider, and we lose the ability to control total character length. With enough refreshing, it's possible to have it create a password for you that meets one's length requirements, but it could be easier & faster. Current State: Pronounceable Off: Length slider remains as-is Other fields remain as-is Pronounceabl…

When generating a password, the "Separated By" drop down allows us to choose one of several separators that will be used throughout the entire password. This functionality is good but I think it can be made better by adding a "multi" option that randomly picks a different separator character between each word. For example if the current separator is "Underscore" then the password would be "Correct_horse_battery_staple". Swiching to the "multi" option would result in a password like "Correct_horse,battery$staple", or "Correct-horse.battery staple" or "Correct$horse#battery_staple" etc.

Both 1Password and Bitwarden support generating/saving SSH keys, allowing subsequent SSH login via SSH Agent with private key verification. It would be even better if Enpass could also support this feature.

Add the ability to control the font and font size to Appearance settings.

When I enter a phone number I'd like it to be auto-formatted. Currently I setup field type of Phone and type 8003334444, but it doesn't format to (800) 333-4444 let alone if I add an extension. If I type a hyperlink in HTML I can add extensions, but extensions are relatively rare, so I think that could be an additional feature request if you can't find a solution in a reasonable amount of time. <a href="tel:+441234567,88">+44-123-4567 ext. 88</a> There are also fields where it auto-formats as you type. This would be ideal, but not necessary. It could auto-format after I finished typing. http://igorescobar.github.io/jQuery-Mask-Plugin/

Username and password autofill is great, but it breaks on sites (such as for certain security appliances) where the password and OTP have to be entered into the same field. Obviously the work around for this is to not use autofill, but it's only an issue in this particular case. Some options for an improvement might be: A per-entry whitelist that works like a boolean of "copy both password and otp for this site" consisting of the password and otp concatenated together in the clipboard, with option of Password+OTP or OTP+Password, for some schemes where the OTP is required before or after the password proper, A right-click option under "Copy OTP" that allows fo…

A while ago we got the info "Important Update: Generator-Rules are now Passwort-Rules". This might sound good, but it isn't for everybody. We are MSPs and have to cover loads of passwords created by our customers. Now we have to choose between "not being able to generate very good passwords" or "having about 80% of the stored password criticized for being not compliant" - this doesn't make sense. We need to be able to have separate rules - or we need to be able to manually configure the generator to exceed the predefined limits of the rules.

I love Enpass, but I find that very often, the browser autofill popup opens to its "identity" panel, rather than the much more likely to be relevant "login" panel. This can make some users assume there are no saved passwords for the site, or, at the very least, add a little frustration and extra effort to an otherwise seamless experience. Please allow users (or just change the default behavior) to tune the form-matching heuristics so that for two-stage login forms (for instance, forms that require an email or username to be submitted before the password field is presented), the login panel is more likely to appear. Unless a form contains a full name or address field, I do…

Enpass on Windows 11 for ARM crashes a lot; it crashes whenever it uses Windows Hello to unlock Enpass. I use Enpass on multiple x64 versions of Windows 11, and I do not see these crashes. If I change Enpass to use a PIN to unlock, I don't seem to see these crashes, so it appears this is related to Windows Hello. Is this specific to Windows on ARM64? Could we get a natively-compiled version for ARM64? This is on a Lenovo Slim 7x with the CPU: Snapdragon(R) X Elite - X1E78100

I have many logins that apply to multiple websites, for example, an Amazon account is for amazon's shopping site but also Kindle, Prime video, etc. I've found that I often have to add extra website URLs to login entries so that Enpass will associate that entry with that site. But the process is cumbersome. You have to click the plus symbol, name the new field, select the field type as URL, etc. It would be great if Enpass had a simple "plus" button next to the website field that automatically creates additional website fields, with a default name of "Website 2", "Website 3", etc. Thank you.

Hello in my homelab i have a lot of services on my server with the same base ip but lots of different ports. unfortunately enpass shows me all i have saved and it can be confusing which one to use. especially on my phone because i see only the username (often times admin). can you please change that? Regards Jonas

A thread on this topic has existed since 2017, but the Linux Enpass client still uses legacy X11 and does not work properly on Wayland-based distros. As more and more distros switch to Wayland, this is becoming a real problem. https://discussion.enpass.io/index.php?/topic/1134-not-compatible-with-wayland/&_fromLogin=1 Are there plans to address this in a release soon?