Menu

Feature Request: Winkee to use "new" windows 10 login pin (Windows Hello)

C. Engelke
2020-04-07
2020-04-08
  • C. Engelke

    C. Engelke - 2020-04-07

    I do believe using just your windows user account to encode your database password is inferior to encrypting it with the pin (Windows Hello Security Key. Prompting the user's pin should be possible in c# (Github Windows Passport example). Don't know how to contact Theo about this. Do you think it's worth a try?

     
  • Paul

    Paul - 2020-04-07

    Why is it inferior? If you login to Windows via Hello then you are using the same level of security.

    Are you proposing using Windows Hello as the master key to open a KeePass database? That prevents you sharing the database with non-Windows / your Windows machine and makes recovery more difficult.

    cheers, Paul

     
    • C. Engelke

      C. Engelke - 2020-04-07

      If you login to Windows via Hello then you are using the same level of security.!

      This is true only if you always log out of Windows when leaving your PC unattendet. If you leave your computer (e.g. while time consuming calculations run in background), anyone can open keepass with two keystrokes on the enter key. This is the situation where I believe additional security is added.

      Are you proposing using Windows Hello as the master key to open a KeePass database?

      No I am not. As you stated correctly this would undermine sharing the database.
      I hope I could clarify my request. Thanks for the fast reply. Let's discuss this further.

       
      • Horst

        Horst - 2020-04-07

        I don't know what strange config you are using
        but no one can open my KeePass while I'm away or doing long calculations
        because its configured to lock after a short time of usage.

         
        • C. Engelke

          C. Engelke - 2020-04-07

          The purpose of the winkee plugin is to unlock a database without password, just by using the windows account. This configuration is standard when using this plugin I suppose.

           
  • Paul

    Paul - 2020-04-08

    There is already a Windows Hello plug-in.

    cheers, Paul

     
  • C. Engelke

    C. Engelke - 2020-04-08

    Oops. Sry. Thic can be closed. Thank you very much Paul.

     

Log in to post a comment.