4 ms·
Correct me if I'm wrong but if you install a malicious application, aren't you screwed anyway, password in clipboard or not?
by tmalsburg2 10y ago
Correct me if I'm wrong but if you install a malicious application, aren't you screwed anyway, password in clipboard or not?
- Buge 10y agoOn desktop yes. But on mobile, where every app is sandboxed to some degree, not necessarily. Keepass2Android prevents clipboard attacks by installing a keyboard that autotypes your password, never letting it get to the clipboard.
- amelius 10y agoInteresting approach. But keyboards are quite personal (some people choose their keyboard), and there's quite a lot of technology in keyboards (gestures to text, learning dictionaries, et cetera), so I'm wondering about the quality and user-friendliness of the approach.
- x1798DE 10y agoYou only use the keyboard to enter the password, not in general. When you open the database and select an entry, it offers to switch to the password keyboard for you, then when you are done you switch back.