Password displayed in plain text in error message when Auto-Type sequence is...
A lightweight and easy-to-use password manager
Brought to you by:
dreichl
Menu
▾
▴
Hi,
I'm not sure if this is intentional or not (I hope not), but I see that when you override the default sequence for an entry and that sequence has an invalid format (ex. "{USERNAME}[ENTER}{DELAY 2000}{PASSWORD}{ENTER}" (see the "[" instead of "{"), all the placeholders are converted to their actual values, and displayed for everyone to see in the error message that pops up when you try to use Auto-Type on that entry.
I think this is a security risk since if anyone is watching your screen and you have a password that is easy to remember once you look at it, your account is compromised until you change your password. Please consider fixing this! :)