Password sniffing from clipboard

350 views
Skip to first unread message

sander....@gmail.com

unread,
Mar 20, 2016, 4:29:52 AM3/20/16
to KeePassDroid
Is the way KeepassDroid uses the clipboard to grab the username/password a safe way? Keepass2Android, an alternative app that I stumbled upon when updating KeepassDroid, mentions the security risk of using the clipboard, as there can be apps that sniff the clipboard. Keepass2Android claims it uses a "Soft-Keyboard" to circumvent this problem. Is that safer?

e.blac...@gmail.com

unread,
Dec 8, 2016, 11:39:35 PM12/8/16
to KeePassDroid, sander....@gmail.com


On Sunday, March 20, 2016 at 4:29:52 AM UTC-4, sander....@gmail.com wrote:
Is the way KeepassDroid uses the clipboard to grab the username/password a safe way? Keepass2Android, an alternative app that I stumbled upon when updating KeepassDroid, mentions the security risk of using the clipboard, as there can be apps that sniff the clipboard. Keepass2Android claims it uses a "Soft-Keyboard" to circumvent this problem. Is that safer?

It boggles my mind that this hasn't been addressed. It has been years since this threat to android password manager was raised. Other apps have closed the hole. And why isn't something about this right up front in the FAQ? This isn't responsible.

This has decided it for me, to use Keepass2Android Offline, even though I'd really rather not run a Mono app.
Reply all
Reply to author
Forward
0 new messages