veler / pazword Goto Github PK

Describe the bug
Using the following image as an icon will transform the blue of the sky to orange.

Additional context

It's probably due to some sort of encodage.

Currently when you select "use an existing database" upon setup. There is no option to select a local database.

A way more advanced password generator. Don't exactly understand the length cap of 32.

Some options to consider:

Non-pronouncable:

Pronouncable:

It should probably ask for the recovery key instead.

Problem: I have hundreds of passwords in my browser, I can't just simply spend hours inputting them manually into PaZword.
Solution: An option to Import passwords from a file (.csv) or directly from the browser.

Describe the bug
Adding an account like PayPal doesn't succeed to find the account icon.

Screenshots

Suggestion to fix
When no icon is found, try to get the favicon of the website. Also, try to check if there is a service online that could give the URL of a website based on a company name.

Some old websites don't accept passwords with symbols, for instance. It would be good that the password generator has options to decide whether to include numbers, symbols and letters.

Describe the bug
Compared to Office apps, the PaZword logo is smaller.
It would be nice to have it streamlined to make it feel like it belong to the family. :)

To Reproduce
Steps to notice the differences :

1. Pin PaZword to the taskbar
2. Pin PaZword on the Start Screen

Expected behavior
Please make the logo bigger.
(Perfect customer request for an advertisement agency ! 😄 )

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop:

• OS: Windows 10
• Version 2004

Additional context
Good luck ! 😛

Would love to use this app, looks like a great improvement on lots of windows password managers. Unfortunately lack of .kdbx database support is a dealbreaker, as i use a single database across multiple devices.

It would be nice to have this text customizable:

Add a "What's new" UX that appears after an update.

Following up from my comment on your post :)

If I understand your code correctly, it looks like you're using the same _randomBufferCBC as the IV to encrypt all values in the database. You're suing AES-CBC, so this isn't as terrible a vulnerability as it would be if you were using GTM mode, but this is still a problem.

It is, however, safe to randomly generate an IV for each encrypted value and store it (in readable form) alongside the encrypted content, e.g.

var iv = CryptographicBuffer.GenerateRandom(32);
var encryptedBinaryData = CryptographicEngine.Encrypt(cryptographicKey, binaryData, iv);
var encryptedStringData = CryptographicBuffer.EncodeToBase64String(iv) +
  ":" + CryptographicBuffer.EncodeToBase64String(encryptedBinaryData);

Some more info: https://defuse.ca/cbcmodeiv.htm

After the version with Russian language is released, the app language remains English.

This needs a browser plugin for automated login and password generation.

Setup two-factor authentication keeps generating logs after the dialog got closed. This is due to a timer that doesn't gets stopped.