#1466 {NEWPASSWORD} auto-type for "Derive from Previous Password"

[mranybody]

The {NEWPASSWORD} placeholder generates a new password for the current entry, based on the "Automatically generated passwords for new entries" generator profile.

I'd like to an option or default to select the placeholder to be based on "Derive from Previous Password" profile for the current entry.

This would allow the {NEWPASSWORD} placeholder to be used for Auto-type (for a typical 'Old Password'-'New Password'-'Repeat New Password' dialog) in cases were there's character restrictions on a new password, and give me the option to use the placeholder that would suit any entry's needs.

Any chance, Dominik?

Many thanks.

[Ikarus]

I would just like to put some emphasis on the point, that any possibility to create passwords adapted to a specific site or application, becomes more and more meaningful as password cracking becomes more frequent. While using keepass I tend to use the strongest password definition a site accepts. Today I always change the rules for "Automatically generated passwords for new entries".

As already discussed it would be better to select a profile or use the settings of the password generator in keepass to set the rules for {NEWSPASSWORD}. The would make it much more comfortable to changes passwords e.g. each time a log into a site or application.

Looking forward to any change to come,
thousands of thanks!
Ikarus

[Chuim]

Yes, this! This would be great to have as right now I'm facing this problem. I have this very PITA website that has it's very specific rules on how their password should be. Beyond that it doesn't allow copy/paste of passwords so it'd be great to have auto-typing working for creating new passwords.

EDIT: and in this specific case simply relying on the "Derive from previous password" wouldn't cut it. Ideally the NEWPASSWORD should allow me to specify the password generating profile, like this:

{NEWPASSWORD:Custom Password Profile}

[Dominik Reichl]

Carlos, thanks for the patch! I've included it, and enhanced it a bit (as the profile name is user data, not a fixed string, I prefer the syntax as used e.g. with T-REPLACE-RX and T-CONV; this also has the advantage that we can reuse the SprEngine.ParseAndRemovePlhWithParams method; furthermore I've added support for the built-in profiles, which are not in UserProfiles; plus I added support for a profile '~', which derives the profile from the current password).

For example, to generate a new password using the profile 'ABC', the placeholder is
{NEWPASSWORD:/ABC/}

Here's the latest development snapshot for testing:
http://keepass.info/filepool/KeePass_140618b.zip

Thanks and best regards,
Dominik

[Chuim]

Woot! Glad to be able to contribute to a project that I rely on every day.

Thanks for the extra fixes and adaptations Dominik. I wasn't fully aware of the implications and interconnections of my changes. I'll ran the snapshot here and the new feature seemed to be working correctly.

Just to leave it registered here how the implementation works I copied part of my initial email to Dominik and updated it with his changes:

What I did was to improve the NEWPASSWORD auto-type tag to add the ability to specify a specific generation profile to it. If nothing is specified I simply do the same thing as it was done before.

Otherwise, if a profile is specified (NEWPASSWORD:/Profile Name/) I try to get that generation profile by name (case insensitive). If "~" is used then it derives the new password from the current one. If the profile name doesn't match anything, the "Automatic..." one is used.

The first occurrence of the NEWPASSWORD tag is the one that defines what happens: using a specific profile or the default. All following occurrences are simply overridden with whatever new password was initially generated.

[wellread1]

In testing I noticed an interface anomaly that predates this snapshot.

The KeePass entry list view does not refresh after executing an auto-type containing the {NEWPASSWORD} placeholder. A user action is required to force a refresh (e.g. hide then unhide the password, or move the focus to a different group & back).

[Dominik Reichl]

Right, thanks! I've fixed this now.

Here's the latest development snapshot for testing:
http://keepass.info/filepool/KeePass_140619.zip

Best regards,
Dominik

[Dominik Reichl]

The same update is required after copying something to the clipboard, which I've added now :-)

http://keepass.info/filepool/KeePass_140619b.zip

Thanks again, best regards,
Dominik