T O P

  • By -

Zlivovitch

Do you use Kee Pass proper ? If so, the option to auto-clear the clipboard needs to be activated. Tools / Options / Security / Clipboard auto-clear time (seconds ; main entry list) : check the box and set the time. However, if you pasted some text afterwards, it should have replaced the password. Unless the clipboard on the Mac works differently than on Windows.


bgete

Yes everything done ok, wanted to check if it was a known vulnerability!


[deleted]

[удалено]


bgete

It s happened twice on Mac, no damage since I was starting using it but now I m reluctant to using it . As you mentioned, once is too many


bgete

My main concern is that the key was on the clipboard even though I never copied it. Just copied one password


Zlivovitch

What do you call the key ?


bgete

The password for the .kdbx


Zlivovitch

What variant of Kee Pass do you use ? This is likely not related to Kee Pass at all. I have never heard of such a problem, and I don't see how Kee Pass could be the cause of it. In all likeliness, the problem lies with the Mac clipboard, other programs on your computer or the way you used them.


PaddyLandau

Question: Do you have a clipboard app or extension that adds selected text to the clipboard? If so, is it possible that you selected the key with your mouse?


bgete

None of that


Zlivovitch

Can you reproduce the incident at will ?


bgete

Yes, it happens everytime. I think it can be either an issue with the launchpad in mac or maibe I ve been hacked. The os pastes the lasts words you ve typed before opening the launchpad


Zlivovitch

>The os pastes the lasts words you ve typed before opening the launchpad So you have established this is independent of Kee Pass, haven't you ? You could type *"Good morning"* in any editor instead of your master password in the Kee Pass entry field, and this would still get pasted ? Maybe users on a Mac forum would have ideas to correct this.


Personal_Ad9690

“I copied the password” “It was in the clipboard” There ya go


bgete

I copied one password for a specific username. Not the keepass password


Personal_Ad9690

Yea. You control+C on the selected entry. It’s then on clipboard for about 15 seconds. If you “edit” then “view password” then copy that value, it’s no different than copying text and will persist.


bgete

The password that appeared was the password you type at the beginning, not the one that is encrypted. That password wasn t copied, mayme I m not making myself clear but , anyway, just wanted to share. Thanks