Skip to content

FR: Option to show expired accounts when using auto-fill on desktop app #833

Open
@mrtoikka

Description

@mrtoikka

As title says, it would be nice to have an option in the desktop client to be able to show expired accounts when using auto-fill feature.

Currently, if an account expires, I can't see it when using auto-fill. This is a bit of a nuisance, because I then have to open the application to get the account password I'm looking for.

From a security standpoint I can see why people might not want old passwords to be shown/suggested - not showing them is one more thing that pushes people into better practices of changing passwords on a regular basis... However, some of us out there do generate pretty secure and unique passwords (hence our reliance on an app to store them). So for us to use said expired passwords a little longer is not a significant security threat if one of them is compromised somehow.

As a work-around, we could also just go disable the expiration date on all our passwords, which would allow them all to show up in the auto-fill/suggestion box, but I would argue that work-around supports worse habits/practices... also makes it harder for people to go back later and figure out which passwords are oldest and need to be changed first (not impossible just more work, which we all know is something most people won't put in the effort for).

Besides, the app on the phone will show expired entires (albeit grayed out, indicating they're expired). Seems odd the iOS app and Desktop app are not consistent in that way. And this is a feature other apps also support (ex: KeepassXC).

I would suggest after adding the feature to show expired auto-fill accounts, that it's disabled by default though. To me, this seems to be the best way to go for everyone, all things considered.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions