feat: Add secure password remember functionality #7

Closed
bouleetbil34 wants to merge 1 commit from master into master
bouleetbil34 commented 2025-12-27 22:26:00 +00:00 (Migrated from github.com)

This commit implements a secure password remember feature that allows users to store their Bitwarden master password locally for faster subsequent logins.

Features

Security Implementation

  • AES-256 encryption using the cryptography library
  • PBKDF2-HMAC-SHA256 key derivation with 480,000 iterations
  • Unique salt per user based on email address
  • Automatic cleanup when feature is disabled
  • Silent error handling for decryption failures

User Interface

  • Security settings section with toggle option
  • Auto-fill functionality on login screen
  • Immediate password removal when disabled
  • Seamless integration with existing authentication flow

Files Modified

  • src/main.py: Added password encryption/decryption functions and configuration handling
  • src/ut_components/memoize.py: Added memoize_enabled() and set_memoize() functions
  • qml/ConfigurationPage.qml: Added Security section with Remember Password toggle
  • qml/LoginPage.qml: Implemented auto-fill functionality
This commit implements a secure password remember feature that allows users to store their Bitwarden master password locally for faster subsequent logins. ## Features ### Security Implementation - AES-256 encryption using the cryptography library - PBKDF2-HMAC-SHA256 key derivation with 480,000 iterations - Unique salt per user based on email address - Automatic cleanup when feature is disabled - Silent error handling for decryption failures ### User Interface - Security settings section with toggle option - Auto-fill functionality on login screen - Immediate password removal when disabled - Seamless integration with existing authentication flow ### Files Modified - src/main.py: Added password encryption/decryption functions and configuration handling - src/ut_components/memoize.py: Added memoize_enabled() and set_memoize() functions - qml/ConfigurationPage.qml: Added Security section with Remember Password toggle - qml/LoginPage.qml: Implemented auto-fill functionality
maciek134 commented 2025-12-28 13:40:20 +00:00 (Migrated from github.com)

There is nothing secure about this (you are storing everything needed to decrypt the password next to the password, the encryption is pointless), and the whole PR looks LLM generated.

There is nothing secure about this (you are storing everything needed to decrypt the password next to the password, the encryption is pointless), and the whole PR looks LLM generated.

Pull request closed

Sign in to join this conversation.
No description provided.