New issue
Advanced search Search tips

Issue 628895 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Jul 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Prompt for widows password

Reported by redempti...@gmail.com, Jul 16 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36

Steps to reproduce the problem:
1. In settings, trying to view /manage passwords  
2. Prompt pops up use/enter windows password
3.no way to disable this prompt 

What is the expected behavior?
that I furnish my windows password

What went wrong?
Nothing, I want this annoying feature disabled.

Did this work before? N/A 

Chrome version: 51.0.2704.106  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 22.0 r0

No way to disable this feature and all links in the help center relating to this are at least 2-3 years old and no longer apply. Including this outdated information which points to flags, etc, and no such feature exists anymore...chrome://flags/#password-manager-reauthentication
 
1468507747391.jpg
22.7 KB View Download
Screenshot_2016-07-15-00-05-39.png
78.6 KB View Download
Lovemeli.... And what does these mean? You are not contributing any meaningful reply...

Comment 4 by vishnu...@gmail.com, Jul 16 2016

You are asking for a feature to be removed

Many users expect atleast some privacy and security from password theft from rogue programs on the system. For this reason chrome prevents exposure of passwords to any user that does not furnish the windows password.

This is related to the debate between Security vs Annoyance .

Although I cannot speak for the chrome team, I think more people prefer security over annoyance.

More security conscious people also ask for an independent master password with encryption for passwords.

I do not think most people will agree with your request.
Agreed in most cases you are 100% ! How ever there exist some scenarios in
which there is no windows password, or virtual pass words, etc.

Peace,
Mick
Components: UI>Browser>Passwords
Status: Untriaged (was: Unconfirmed)
Could some one from Passwords team please confirm whether this is a valid or invalid issue and udpate the status accordingly.
Changing the status to Untriaged as of now.
Thank You.

Comment 7 by vabr@chromium.org, Jul 18 2016

Components: Security>UX Privacy
Labels: Hotlist-Polish
Status: WontFix (was: Untriaged)
Thanks for raising this issue.

The password reauthentication actually does not serve a security purpose (the passwords are accessible through different ways without reauthentication for a skilled attacker). The passwords is here for privacy protection (nosy people without deep skills in the vicinity of the computer).

Why it is a controversial feature, with the trade-off of the privacy gains against the inconvenience and confusion towards the security implications, it has been decided in the past, that Chrome implements it. There was a heated debate with both internal and public involvement, and it is not going to be revisited without new data.

Therefore I'm afraid I'll close this as "WontFix".
Components: -Security>UX
Labels: Team-Security-UX
Security>UX component is deprecated in favor of the Team-Security-UX label

Sign in to add a comment