Skip to content

Key file last position is remembered after session lock #1151

@jamm3r

Description

@jamm3r

KeepassXC remembers the exact position (directory) of the Key file after session is locked/unlocked, potentially reducing the security of the key file, even if "remember last key files and security dongles" option is disabled.

Expected Behavior

After a session lock / lid closed KeepassXC should point to the user home directory (as for a new instance of KeepassXC) instead of bringing the user to the directory where the last used key file is/was positioned.

Steps to Reproduce (for bugs)

While using a database with also a key file master key:

  1. De-select "Remember last key files and security dongles"
  2. Select "Lock databases when session is locked or lid is closed"
  3. Lock session
  4. Unlock session
  5. Browse for the key file

Debug Info

KeePassXC - Version 2.2.2
Revision: 6d46717

Libraries:

  • Qt 5.9.2
  • libgcrypt 1.8.1

Operating system: Windows 7 SP 1 (6.1)
CPU architecture: x86_64
Kernel: winnt 6.1.7601

Enabled extensions:

  • KeePassHTTP
  • Auto-Type
  • YubiKey

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions