Menu

#1550 Caps lock indicator when in password fields

KeePass_2.x
closed
nobody
5
2014-07-24
2011-11-04
No

Provide an indicator if caps lock is on when typing a password in any of the masked password fields.

Discussion

  • omit

    omit - 2013-07-12

    I would appreciate that function, too. Like it is now in the Windows 7 Login form. If you have caps lock enabled (often accidently), it shows the notice, that it is activated.

    I just tried to insert my password in KeePass three times. My database did not open. Then I opened notepad to type some characters, where I noticed, that I have caps lock accidently turn on. Again back to KeePass to insert the correct password.

    I think this happens quite often to a lot of users that use the shift key (for upper-case letters etc.). The caps lock is just above the shift key, so it is "easy" to accidently turn caps lock on, without noticing.

    Thanks a lot.
    omit

     
  • wellread1

    wellread1 - 2013-07-12

    To the right of the Master Password button there is a reveal password button, labeled "...". This is useful to reveal the password as you type it whenever you are having trouble opening your database.

     
  • Paul

    Paul - 2013-07-13

    As KeePass never locks you out after bad attempts there is no requirement for this notice.
    Pressing the "..." button will show the characters you type, no need to open Notepad.

    cheers, Paul

     
  • omit

    omit - 2013-07-15

    I have overlooked that "..." button. Thanks.

    But anyway I still see points to integrate such notice function: 1. usability and 2. security. It would be much easier for the user to have this caps lock notice and not to press on that "..." button. Furthermore, revealing the password always means that the possiblity that someone can read it at your monitor is higher.

    omit

     
  • Paul

    Paul - 2013-07-15

    You only press "..." to make sure the keys are OK, not to show the whole password.

    cheers, Paul

     
  • omit

    omit - 2013-07-15

    And what if I just mistyped one character and then press "..." because I thought it was the caps lock? Then someone looking at the screen has nearly the correct password. Just one character is wrong. If I have the caps lock indicator then it won't be necessary to press "..." when it is wrong due to caps lock.

     
  • Paul

    Paul - 2013-07-17

    One typo makes the whole password secure from casual views - assuming the password is complex.

    cheers, Paul

     
  • omit

    omit - 2013-07-17

    I don't think so. If someone has my password and assumes that it has one typo, than he can easily and fast try the variations of it: He knows the keyboard layout (or can easily get to know it) and just has to change each of the characters by replacing it with the "surrounding" characters of the keyboard, together with combinations with the shift key. Scripted this will be done within milliseconds. Would YOU send me your keepass file and your password with one typo??

     
  • Dominik Reichl

    Dominik Reichl - 2014-07-24
    • status: open --> closed
    • Group: --> KeePass_2.x
     
  • Dominik Reichl

    Dominik Reichl - 2014-07-24

    If Caps Lock is on, Windows shows a balloon tip indicating this whenever the password text box gets focused. However, immediately after opening a dialog, no balloon tip was displayed; this has been added now manually:
    https://sourceforge.net/p/keepass/feature-requests/1905/

    Best regards,
    Dominik

     

Log in to post a comment.