Buttercup-desktop: Buttercup masked password field length

Created on 2 Dec 2016 · 5Comments · Source: buttercup/buttercup-desktop

Hi Folks!

Firstly, congrats on the latest Buttercup release it looks awesome \o/ - just wanted to ask if when displaying masked passwords in the Buttercup UI that the length could be concealed so as to prevent possible password length giveaway to prying eyes 👀 (the latest 1Password 6 for windows masks all passwords as 10 characters, even tho the underlying password maybe greater etc). This could also fix wrapping issues (see attached).

buttercup_password_field

Kindest regards, Mike

Medium Enhancement

Source

mikebowering

👍1

Most helpful comment

That's a good idea. Obviously we'd probably need to show the length while typing, like the others do I'm sure, but when saving and loading it should definitely be a fixed length display.

perry-mitchell on 2 Dec 2016

👍2

All 5 comments

That's a good idea. Obviously we'd probably need to show the length while typing, like the others do I'm sure, but when saving and loading it should definitely be a fixed length display.

perry-mitchell on 2 Dec 2016

👍2

And thanks for the remark! 😄

perry-mitchell on 2 Dec 2016

@mikebowering Thanks Mike for pointing this out. Will issue a patch ASAP since this is kind of a security concern and length shouldn't be revealed (it was actually pointed out to me by @perry-mitchell a while ago but I forgot about it while implementing the password field).

Thanks!