[Bug 1719078] [NEW] sddm has the option to show password and it cannot be turned off

Simon Oosthoek s.oosthoek at xs4all.nl
Sat Sep 23 10:09:32 UTC 2017


Public bug reported:

It appears that there is no way to turn off the toggle to show the
password in plain text.

There are a lot of situations where accidentally having this toggle to
show passwords on, while not expecting it. When people are looking at
the screen who should not know the password, this is disastrous!

The toggle is hard to see, and there is hardly any visible indication that the password will be readable.
The toggle can be set by anyone having access to the login screen.

Imagine parents who want to have some control over when their children
log in to the computer. The children can set the toggle and then when
the parent is typing in the secret password, they can just read it.

Or when you are in a public space and you are unaware that the option
has been toggled and someone is looking over your shoulder. Etc.

If this option is deemed necessary for/by some users, it should never be
on by default and AFAICT it currently (17.04) isn't an option that can
be configured.

This bug is solved for me when
- the toggle is made a configurable option
- it is set to disabled by default after installation

** Affects: plasma-workspace (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: password secret security

-- 
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to plasma-workspace in Ubuntu.
https://bugs.launchpad.net/bugs/1719078

Title:
  sddm has the option to show password and it cannot be turned off

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/plasma-workspace/+bug/1719078/+subscriptions




More information about the kubuntu-bugs mailing list