Prompt for widows password
Reported by
redempti...@gmail.com,
Jul 16 2016
|
||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 Steps to reproduce the problem: 1. In settings, trying to view /manage passwords 2. Prompt pops up use/enter windows password 3.no way to disable this prompt What is the expected behavior? that I furnish my windows password What went wrong? Nothing, I want this annoying feature disabled. Did this work before? N/A Chrome version: 51.0.2704.106 Channel: stable OS Version: 10.0 Flash Version: Shockwave Flash 22.0 r0 No way to disable this feature and all links in the help center relating to this are at least 2-3 years old and no longer apply. Including this outdated information which points to flags, etc, and no such feature exists anymore...chrome://flags/#password-manager-reauthentication
,
Jul 16 2016
,
Jul 16 2016
Lovemeli.... And what does these mean? You are not contributing any meaningful reply...
,
Jul 16 2016
You are asking for a feature to be removed Many users expect atleast some privacy and security from password theft from rogue programs on the system. For this reason chrome prevents exposure of passwords to any user that does not furnish the windows password. This is related to the debate between Security vs Annoyance . Although I cannot speak for the chrome team, I think more people prefer security over annoyance. More security conscious people also ask for an independent master password with encryption for passwords. I do not think most people will agree with your request.
,
Jul 16 2016
Agreed in most cases you are 100% ! How ever there exist some scenarios in which there is no windows password, or virtual pass words, etc. Peace, Mick
,
Jul 18 2016
Could some one from Passwords team please confirm whether this is a valid or invalid issue and udpate the status accordingly. Changing the status to Untriaged as of now. Thank You.
,
Jul 18 2016
Thanks for raising this issue. The password reauthentication actually does not serve a security purpose (the passwords are accessible through different ways without reauthentication for a skilled attacker). The passwords is here for privacy protection (nosy people without deep skills in the vicinity of the computer). Why it is a controversial feature, with the trade-off of the privacy gains against the inconvenience and confusion towards the security implications, it has been decided in the past, that Chrome implements it. There was a heated debate with both internal and public involvement, and it is not going to be revisited without new data. Therefore I'm afraid I'll close this as "WontFix".
,
Dec 9 2016
Security>UX component is deprecated in favor of the Team-Security-UX label |
||||
►
Sign in to add a comment |
||||
Comment 1 by lovemeli...@gmail.com
, Jul 16 201622.7 KB
22.7 KB View Download