Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secure passwords from 3rd party clipboards in OSX #1

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

andyfase
Copy link

@andyfase andyfase commented Jan 3, 2020

Hi

gopass does not support securely copying passwords into the OSX clipboard. Thats because under the hood it its using pbcopy which does not support adding the attributeorg.nspasteboard.ConcealedType see and this issue

To work around this in the Alfred Workflow I suggest we should use the in-built Alfred clipboard functionality (which does support org.nspasteboard.ConcealedType) hence passwords will not be picked up by any 3rd party clipboard tools on OSX (including Alfred itself)

This PR alters the workflow adding steps to:

  1. Remove use of gopass-c flag for using the clipboard
  2. Adds step to copy password to clipboard using Alfred with "transient" option set
  3. Adds steps to simulate clipboard auto-clearing after 45 seconds as per gopass

@woopstar
Copy link

Any updates to this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants