Less use of Vulnerable Clipboard to insure data security.

[pjsl]

Hi there, i start using Enpass and its great, but found some shortcoming here and there, so willing to give feedback. 

1. Copied data through browser extension ( chrome extension) does not auto clear as it works inside Enpass main desktop application.

2. While generating a new password, there is one option only i.e. "Fill and copy" and as is said in my first point, data don't get auto cleared, so its a problem, as you know clipboard is not a safe place for sensitive data. I don't prefer copy-paste data when we are dealing with sensitive data. Instead of this, there should be a "Fill only" option to inject password directly without using clipboard and this will be more secure as compare to current approach. 

 

Frankly speaking, I like Lastpass approach at this point. Data filled without copying to clipboard and Lastpass even eliminate the need of copying old password manually while changing password where u need to put your old password (Enpass do need copying old password manually while changing passwords like facebook which need old passwords for changing but that's acceptable to some degree, after all, its an old password). This don't mean that am here to promote Lastpass here, Lastpass is not most perfect itself. Even i use Enpass over Lastpass because i like Enpass more than that. But looking at goods of other is not a bad habit as it help us to improve.

 

I really hoping that these points will be considerable in future update.

Thanks, Have a nice day. 

Edited July 9, 2017 by pjsl

[Anshu kumar]

Hi @pjsl

Thanks for using Enpass and sharing the valuable feedback.

On 08/07/2017 at 0:39 PM, pjsl said:

1. Copied data through browser extension ( chrome extension) does not auto clear as it works inside Enpass main desktop application.

 

Thanks for notifying this issue. I have noted down this issue, and the fix will be available in the next update.

On 08/07/2017 at 0:39 PM, pjsl said:

2. While generating a new password, there is one option only i.e. "Fill and copy" and as is said in my first point, data don't get auto cleared, so its a problem, as you know clipboard is not a safe place for sensitive data. I don't prefer copy-paste data when we are dealing with sensitive data. Instead of this, there should be a "Fill only" option to inject password directly without using clipboard and this will be more secure as compare to current approach. 

 

Once the issue of clipboard not being cleared automatically is fixed, there shouldn't be any problem with Fill and Copy. Also, I have noted your request to add a feature of Fill only. 

Cheers!

[pjsl]

@Anshu kumar

Really appreciate your positive response.

4 hours ago, Anshu kumar said:

Once the issue of clipboard not being cleared automatically is fixed, there shouldn't be any problem with Fill and Copy. Also, I have noted your request to add a feature of Fill only.

Yeh, but eliminating the clipboard usage will be much more secure then auto clearing it. I really hope a little "Fill only" button after update .

Thanks you. Have a nice day.