starred/1Remote

Fork 0

mirror of https://github.com/1Remote/1Remote.git synced 2026-04-25 05:26:04 +03:00

[GH-ISSUE #466] Before viewing or exporting passwords, require for Windows hello verification. #3287

New issue

Closed

opened 2026-03-13 08:45:13 +03:00 by kerem · 8 comments

kerem commented

2026-03-13 08:45:13 +03:00

Owner

Originally created by @VShawn on GitHub (Jul 30, 2023).
Original GitHub issue: https://github.com/1Remote/1Remote/issues/466

Originally assigned to: @VShawn on GitHub.

Discussed in https://github.com/1Remote/1Remote/discussions/464

Before viewing plain text passwords or exporting passwords in plain text to json, it is require Windows Hello authentication (if supported by the system).

Note that this ticket does not involve secondary encryption of passwords, and if the database or memory is physically copied, password theft can still occur.

### places need Windows Hello
- [x] viewing plain text passwords with click the eye button
- [x] copy plain text passwords from launcher or context menu
- [x] export to json

Originally created by @VShawn on GitHub (Jul 30, 2023). Original GitHub issue: https://github.com/1Remote/1Remote/issues/466 Originally assigned to: @VShawn on GitHub. ### Discussed in https://github.com/1Remote/1Remote/discussions/464 Before viewing plain text passwords or exporting passwords in plain text to json, it is require Windows Hello authentication (if supported by the system). Note that this ticket does not involve secondary encryption of passwords, and if the database or memory is physically copied, password theft can still occur. ```[tasklist] ### places need Windows Hello - [x] viewing plain text passwords with click the eye button - [x] copy plain text passwords from launcher or context menu - [x] export to json ```

kerem

2026-03-13 08:45:13 +03:00

closed this issue
added the
meta-feature

general-security
labels

kerem commented

2026-03-13 08:45:29 +03:00

Author

Owner

@VShawn commented on GitHub (Jul 30, 2023):

Feasibility experiment demo has been completed: https://github.com/VShawn/WpfWindowsHelloLoginApp

@VShawn commented on GitHub (Jul 30, 2023): Feasibility experiment demo has been completed: https://github.com/VShawn/WpfWindowsHelloLoginApp

kerem commented

2026-03-13 08:45:34 +03:00

Author

Owner

@VShawn commented on GitHub (Aug 10, 2023):

I trying to use Windows Api CredUIPromptForWindowsCredentials instead of Microsoft.Windows.SDK.NET.dll.

works with win10
fail on win11.

@VShawn commented on GitHub (Aug 10, 2023): I trying to use Windows Api `CredUIPromptForWindowsCredentials` instead of `Microsoft.Windows.SDK.NET.dll`. works with win10 fail on win11.

kerem commented

2026-03-13 08:45:39 +03:00

Author

Owner

@bokkoman commented on GitHub (Aug 10, 2023):

Needs W11 support.

@bokkoman commented on GitHub (Aug 10, 2023): Needs W11 support.

kerem commented

2026-03-13 08:45:44 +03:00

Author

Owner

@VShawn commented on GitHub (Aug 11, 2023):

Needs W11 support.

it do support:)

@VShawn commented on GitHub (Aug 11, 2023): > Needs W11 support. it do support:)

kerem commented

2026-03-13 08:45:49 +03:00

Author

Owner

@majkinetor commented on GitHub (Aug 11, 2023):

I don't want this, now I can't see password nor I can export. I am blocked now.

This is Windows 10.

This feature absolutelly needs to prevent otucomes like this one. It should at least revert to OS password as it is probably a safe bet.

Feature should be diasbled by default. When enabling, you should confirm it works by asking it the very same as with password. You should also ask on disabling it later. This will prevent enabling the feature and not being able to disable it if it doesn't work.

@majkinetor commented on GitHub (Aug 11, 2023): I don't want this, now I can't see password nor I can export. I am blocked now. ![image](https://github.com/1Remote/1Remote/assets/85767/00648863-5f52-4777-8cac-139cb126dffd) ![image](https://github.com/1Remote/1Remote/assets/85767/7378d37c-182d-46ee-b2da-eae558385896) This is Windows 10. This feature absolutelly needs to prevent otucomes like this one. It should at least revert to OS password as it is probably a safe bet. Feature should be diasbled by default. When enabling, you should confirm it works by asking it the very same as with password. You should also ask on disabling it later. This will prevent enabling the feature and not being able to disable it if it doesn't work.

kerem commented

2026-03-13 08:45:54 +03:00

Author

Owner

@VShawn commented on GitHub (Aug 13, 2023):

I trying to use Windows Api CredUIPromptForWindowsCredentials instead of Microsoft.Windows.SDK.NET.dll.

works with win10 fail on win11.

The task of importing Windows Hello has been completed. The remaining work needs to be carried out after I finish testing the Windows API, which will be handled as another ticket.

@VShawn commented on GitHub (Aug 13, 2023): > I trying to use Windows Api `CredUIPromptForWindowsCredentials` instead of `Microsoft.Windows.SDK.NET.dll`. > > works with win10 fail on win11. The task of importing Windows Hello has been completed. The remaining work needs to be carried out after I finish testing the Windows API, which will be handled as another ticket.

kerem commented

2026-03-13 08:45:59 +03:00

Author

Owner

@bokkoman commented on GitHub (Aug 15, 2023):

I trying to use Windows Api CredUIPromptForWindowsCredentials instead of Microsoft.Windows.SDK.NET.dll.
works with win10 fail on win11.

The task of importing Windows Hello has been completed. The remaining work needs to be carried out after I finish testing the Windows API, which will be handled as another ticket.

Which ticket will this be? So i can follow it :)

@bokkoman commented on GitHub (Aug 15, 2023): > > I trying to use Windows Api `CredUIPromptForWindowsCredentials` instead of `Microsoft.Windows.SDK.NET.dll`. > > works with win10 fail on win11. > > The task of importing Windows Hello has been completed. The remaining work needs to be carried out after I finish testing the Windows API, which will be handled as another ticket. Which ticket will this be? So i can follow it :)

kerem commented

2026-03-13 08:46:05 +03:00

Author

Owner

@VShawn commented on GitHub (Aug 15, 2023):

I trying to use Windows Api CredUIPromptForWindowsCredentials instead of Microsoft.Windows.SDK.NET.dll.
works with win10 fail on win11.

The task of importing Windows Hello has been completed. The remaining work needs to be carried out after I finish testing the Windows API, which will be handled as another ticket.

Which ticket will this be? So i can follow it :)

@bokkoman

https://github.com/1Remote/1Remote/issues/484

@VShawn commented on GitHub (Aug 15, 2023): > > > I trying to use Windows Api `CredUIPromptForWindowsCredentials` instead of `Microsoft.Windows.SDK.NET.dll`. > > > works with win10 fail on win11. > > > > > > The task of importing Windows Hello has been completed. The remaining work needs to be carried out after I finish testing the Windows API, which will be handled as another ticket. > > Which ticket will this be? So i can follow it :) @bokkoman https://github.com/1Remote/1Remote/issues/484

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/1Remote#3287

No description provided.

Rows
Columns