[Cyberduck-trac] [Cyberduck] #9096: Awkward situation with saved password.

Cyberduck trac at trac.cyberduck.io
Wed Nov 4 02:10:02 UTC 2015

#9096: Awkward situation with saved password.
    Reporter:  gnotaras  |      Owner:
        Type:  defect    |     Status:  new
    Priority:  normal    |  Milestone:
   Component:  core      |    Version:  4.7.3
    Severity:  normal    |   Keywords:
Architecture:            |   Platform:
 Hi, thanks for writing this application.

 I noticed a weird behavior with a password that is saved and cannot be
 cleaned from within the application no matter what I've tried.

 1. With option 'Use Keychain' enabled, I created a bookmark for an S3
 bucket only by setting the remote path to be the '/bucket-name'
 2. Launched the bookmark, entered access credentials and, while the 'Save
 Password' option in that dialog was *checked*, I connected to the remote
 3. After unchecking the 'Use keychain' option in the settings, deleting
 the bookmark and history, and also after editing the bookmark and removing
 the saved access ID, every time I enter the access ID (that had been
 previously saved), the password field is also auto-populated.

 This does not happen with bookmarks that were created after 'Use keychain'
 was unchecked, which results in the 'Save password' option to be
 deactivated in the dialog for credentials.

 The expected behavior would be the application to auto clean the saved
 password for the resource if the 'save password' is unchecked.

 I'd appreciate some pointers about how to _completely_ clean the password
 from where it has been stored, as it happened to enter it in a 3rd party
 pc. The program was launched by an unprivileged Windows user, while it had
 been installed system-wide.

 Where are the passwords saved?

 Looking forward to your reply.

 Kind Regards,

Ticket URL: <https://trac.cyberduck.io/ticket/9096>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows

More information about the Cyberduck-trac mailing list