"Ctrl - V" aka "Prefor...
A lightweight and easy-to-use password manager
Brought to you by:
dreichl
Menu
▾
▴
I think the following should be changed or made as an option. I am using 1.17 btw please change both versions.
1. Preform AutoType Prompts if ok to do displaying info of what window and what it is typing.
2. Make Preform AutoType not type the credentials if a window is specified and not found (it types it anyway if the window doesn't exist, DANGEROUS)
3. Why does Ctrl+V behave differently to Ctrl+Alt+A? The first ignores my window setting and pastes anyway and the second does it how I want?
The first time I used these options I pasted my login details to MSN!!!! Thank god it was someone close or I'd have to redo my password and I can never change my username. This really needs to be changed.
1. Right clicking an entry and selecting Perform Auto-Type doesn't prompt for anything. Are you using a different method?
2. It's doing what you asked it to do. If it's dangerous it's because you told it to be dangerous.
3. Ctrl V only works when KeePass has focus and it types the credentials from the highlighted entry. Ctrl Alt A works when other windows have focus, then it searches KeePass for an entry that matches the current window title and if found, types the credentials.
cheers, Paul
Preform AutoPasteI was saying it should have an option for prompting before pasting.
Sorry but this is dangerous period. Asked for or not, people can make typos or be on the wrong window too easily. The first comment that I got about the accidental paste was "I'd have uninstalled it, it would be gone from my system permately."
3. Like I said it'd be good if asked and two things were seperated and there was a right click option for ctrl+alt+A. Or that "Preform Auto Type" Just obeyed my Auto-Type-Window entery in the first place.
I agree with Paul's comments.
ctrl-v was designed and intend to perform the autotype key sequence into the last window that had focus.
This ctrl-v is a tool.
This tool takes the current keypass record and performs the key sequence username/password autotype into the last focus window.
What a wonderful tool.
There are many times when it is un-realistic to have a every last permutation of window title defined for a specific keypass record.
A common example is a username/password of a sysadmin.
This username password is used in telnet windows, webpages, install utilities, and system config programs.
The number of times a day a system administrator needs to type the sysadmin username/password is numerous.
During this same day there might be a half dozen differnt programs/webpages/utilities which were used.
Forcing a keypass user to spend hours upon hours configuring every last permuation of where a keypass record would be needed is un-realistic.
This is a fine example where ctrl-v is a wonderful solution.
ctrl-v is a tool in the tool belt.
just like a knife or chisel.
If you use a knife or chisel without care you can injure yourself.
The injury is not the fault of the knife, its the fault of the tool mis-user.
The above said, you ARE correct, ctrl-v can be dangerous.
A possible preventative measure to this danger is to make sure that NO keypass record has an autotype which has a {enter} or a {tab} AFTER the {password} field.
The reason why, is you do make a mistake and do something by mistake and autotype a keypass record into your instant messaging client.
then so long as your password autotype did NOT enter with a {enter} or {tab}
then the chances are exceptionaly good that your password has NOT yet been seen by others.
you can simply hit the backspace key a few times and erase your password.
The worst that occured was your username was sent out over instant message which while confusing to the receivor but not a security risk.
If I was to stick spikey prongs all over the handle of that knife can I still say it's your fault when you injure yourself on it? Please spare me the useless analogies. I made a request for a more consistent and safer behaviour for Auto Type. There are tons of ways I can think of to make is safer and still have the convenience, but it feels like I am wasting my time here, am I?
I'm not sure how anyone could use a knife with spikey prongs all over the handle.
In that analogy there does not seem to be any sane circumstance that anyone could ever effectively use the tool.
I do not think your wasting your time,
I do think there is disagreement as to exactly what is the problem.
ctrl-v, and for that matter "auto-type selected entry" found under "tools" "options" "intergrations"
are very specific tools that are highly functional with highly predictable behaviors.
Both are used by high number of users.
I actually agree with you that they can be dangerous when their function and purpose is not understood.
I'm not certain that I agree that because the tool does does not match your assumption of what it it should do means the tool is wrong. It think Paul and I both are saying the tool, is doing exactly what the manual says it aught to do.
If you would be so kind as to let me start over.
your base issue is "Why does Ctrl+V behave differently to Ctrl+Alt+A?"
The answer to your question is while both are generically called "auto-type"
ctrl+alt+a is a PULL of a keypass record's autotype into your current window.
whereas
ctrl-v is a PUSH of the currently highlighted record's autotype into your window of last focus.
both perform an autotype of a keepass record
in the case of ctrl+alt+a the keepass determines the desired record based title matching rules you defined.
whereas
ctrl-v you determine the record to be used by highlighting it.
so both ctrl+alt+a and ctrl-v perform an autotype of a record
but does it as a pull the other as push,
furthermore
with one the record selection is on auto pilot the other the record selection is manual.
Hope this helps.