Linux security: password can be seen without extra

[dario3004]

dario3004 last edited by

When using Opera for Linux, I can easily check saved passwords without an extra security request.

On other operating systems, before showing the password this happens:

• Windows: windows user password requested
• Phone: fingerprint or screenlock PIN

I would suggest to request user password (as it happens in Windows) to prevent a malicious peek of saved data if the computer is left unlocked.

[leocg]

leocg Moderator Volunteer @dario3004 last edited by

@dario3004 And do you have a password set up for your user on Linux?

And how Chrome and other Chromium based browsers behave?

[dario3004]

dario3004 @leocg last edited by

@leocg Yes the password for Operating System user is in place. For the record I'm using Opera on Ubuntu.

Chrome on Ubuntu also doesn't require OS password to read stored passwords.

[leocg]

leocg Moderator Volunteer @dario3004 last edited by

@dario3004 Then it's probably a Chromium issue.

Would be interesting to see if others are having the same problem.

[leocg]

leocg Moderator Volunteer @dario3004 last edited by

@dario3004 This may be helpful : https://chromium.googlesource.com/chromium/src/+/refs/heads/main/docs/linux/password_storage.md