https://bugs.kde.org/show_bug.cgi?id=508326
Bug ID: 508326
Summary: Klipper handling of the password hint is confusing to
users
Classification: Plasma
Product: plasmashell
Version First 6.3.4
Reported In:
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: Clipboard widget & pop-up
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
Target Milestone: 1.0
SUMMARY
When text is copied with x-kde-passwordManagerHint, the copied text does not
show up in the Klipper widget. This is intentional to protect the sensitive
password text, but as demonstrated by bug 505596, it's confusing to users,
particularly when trying to copy-paste passwords from KWalletManager (or from
other password managers that support x-kde-passwordManagerHint).
STEPS TO REPRODUCE
1. Copy a password from KWalletManager.
2. Observe that it doesn't show up in the Klipper widget.
3. (Try pasting it elsewhere - that should still work regardless.)
OBSERVED RESULT
Password does not show up in the Klipper widget (intentionally), but can still
be pasted elsewhere.
EXPECTED RESULT
Some better options for Klipper:
- Display the password with a timeout counter (e.g. 10-15 sec), delete it when
the timer runs out.
- Display the password, but delete it when new text is copied (don't keep in
history).
- Display an entry for the password, but hide the text with dots or asterisks
by default. Maybe allow the user to reveal it (eye icon). A reveal icon is
convenient, but not mandatory, since the user can still paste the password
where it's actually needed.
In any case, steps should be taken to prevent the copied password from ending
up on disk unencrypted.
SOFTWARE/OS VERSIONS
Linux/KDE Plasma: e.g. Kubuntu 25.04, probably others.
KDE Plasma Version: 6.3.4
KDE Frameworks Version: 6.12.0
Qt Version: 6.8.3
ADDITIONAL INFORMATION
KWalletManager sets the x-kde-passwordManagerHint since version 24.08.0. See
bug 156547 and the linked MR therein. A complementary update is needed in
Klipper to reduce user confusion.
--
You are receiving this mail because:
You are watching all bug changes.
