Don't use this if you're ever going to type in a password where the screen might... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		sonofgod on Nov 7, 2016 \| parent \| context \| favorite \| on: LessPass: sync-less open source password manager Don't use this if you're ever going to type in a password where the screen might be shared -- the constantly-updating "is my password correct" glyphs give away enough information to make it super trivial to decode by eye. PS: the password for the demonstration gif is "passwordpassword"

spb on Nov 8, 2016 | [–]

This is why I designed the similarly-updating glyphs in surpass (https://stuartpb.github.io/surpass/demo.html) to only update after a half-second delay when masked.

guillaume20100 on Nov 7, 2016 | [–]

@dragondave on github open an issue https://github.com/lesspass/lesspass/issues/48. We are working on it.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact