Skip to main content

Extra security on Password Manager - Client secret/Fido/U2F

Core Web App

I'm using the Password parts quite a bit more these days, but, it still makes me nervous leaving Keepass completely for a system that is internet connected…
I would love to see some sort of FIDO/U2F support built in to the password manager, in addition, possibly some sort of client secret or "something" client side that is required so even in a worst case scenario (.env file stolen + some sort of auth bypass), the password database would be useless.

1 comment

Log in to comment and vote

Comments1

  • Red Spool

    •

    Jul 8, 2022

    Yes, I am always extremely nervous about Internet-facing passwords even if we have MFA on the account. Having the option to provide extra protection to critical passwords should be a must.
    The competitor we came from had passphrases you had to enter to be able to access these critical passwords (vaulted passwords) so requiring something like a passphrase or FIDO/U2F to access such passwords like OP mention would be great!