Testing KeePass with our clipboard extender AceText, we've found that KeePass 1.x puts the "Clipboard Viewer Ignore" flag on the clipboard. KeePass 2.x does not do this. The purpose of this flag is to tell clipboard monitors not to automatically capture the text on the clipboard. A password manager like KeePass should use this flag to prevent accidental leakage of passwords. Since KeePass 1.x already uses the flag, it shouldn't be too hard for the developers to make KeePass 2.x do the same. See http://www.clipboardextender.com/developing-clipboard-aware-programs-for-windows/ignoring-clipboard-updates-with-the-cf_clipboard_viewer_ignore-clipboard-format for details.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
KeePass 2.x already has an option for this. 'Tools' -> 'Options' -> tab 'Security' -> option 'Use "Clipboard Viewer Ignore" clipboard format'.
Up to now, the option is disabled by default, because in conjunction with the .NET/OLE clipboard functions it crashed the clipboard extender of Microsoft Office. However, KeePass 2.15 uses native Windows methods for putting data into the clipboard, and thus the Office crashing problem might not appear anymore. So, I'm thinking about enabling the option by default.
Can anyone who has Office installed (with the clipboard extender) enable the 'Clipboard Viewer Ignore' option and test it?
Thanks and best regards
Dominik
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Can anyone who has Office installed (with the clipboard extender) enable the 'Clipboard Viewer Ignore' option and test it?
I enabled the "clipboard viewer ignore" option in KeePass and restarted KeePass. I launched Microsoft Word and brought up the clipboard dialog. I copied a few text items in Word to see that the clipboard viewer captures each item. I copied a username, and a password, in KeePass. Those items appear also. When the clipboard timeout expires in KeePass, the items do not go away. So although KeePass isn't crashing, I'm not sure the option is actually accomplishing anything.
Am I doing something wrong?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I second this. Please remove the warning and/or use a more descriptive text. As it is, I think it is a security risk, because most people won't unerstand what it does and that this flag can be very helpful/important. Anyways, wonderful tool! Loving it so much :-))
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Testing KeePass with our clipboard extender AceText, we've found that KeePass 1.x puts the "Clipboard Viewer Ignore" flag on the clipboard. KeePass 2.x does not do this. The purpose of this flag is to tell clipboard monitors not to automatically capture the text on the clipboard. A password manager like KeePass should use this flag to prevent accidental leakage of passwords. Since KeePass 1.x already uses the flag, it shouldn't be too hard for the developers to make KeePass 2.x do the same. See http://www.clipboardextender.com/developing-clipboard-aware-programs-for-windows/ignoring-clipboard-updates-with-the-cf_clipboard_viewer_ignore-clipboard-format for details.
KeePass 2.x already has an option for this. 'Tools' -> 'Options' -> tab 'Security' -> option 'Use "Clipboard Viewer Ignore" clipboard format'.
Up to now, the option is disabled by default, because in conjunction with the .NET/OLE clipboard functions it crashed the clipboard extender of Microsoft Office. However, KeePass 2.15 uses native Windows methods for putting data into the clipboard, and thus the Office crashing problem might not appear anymore. So, I'm thinking about enabling the option by default.
Can anyone who has Office installed (with the clipboard extender) enable the 'Clipboard Viewer Ignore' option and test it?
Thanks and best regards
Dominik
I enabled the "clipboard viewer ignore" option in KeePass and restarted KeePass. I launched Microsoft Word and brought up the clipboard dialog. I copied a few text items in Word to see that the clipboard viewer captures each item. I copied a username, and a password, in KeePass. Those items appear also. When the clipboard timeout expires in KeePass, the items do not go away. So although KeePass isn't crashing, I'm not sure the option is actually accomplishing anything.
Am I doing something wrong?
Dominik, perhaps it's time to remove the '(not recommended)' from this option in the next version of KeePass?
The only reason I was asking is because this option seems to work fine for me.
I second this. Please remove the warning and/or use a more descriptive text. As it is, I think it is a security risk, because most people won't unerstand what it does and that this flag can be very helpful/important. Anyways, wonderful tool! Loving it so much :-))