Bug 417148

Summary:	Password is always visible when clicking the eye to see
Product:	[Unmaintained] kscreenlocker	Reporter:	tneo
Component:	greeter	Assignee:	Plasma Bugs List <plasma-bugs-null>
Status:	RESOLVED NOT A BUG
Severity:	normal	CC:	bshah, kde
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	openSUSE
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description tneo 2020-02-04 14:47:00 UTC

SUMMARY
When on the greeter screen the user has the ability to see the password entered. This introduces a security issue, that when you press the eye icon the password remains visible. You can even before typing press the eye and the password is visible for all to see.

STEPS TO REPRODUCE
1. Boot into KDE
2. Press 'eye' icon to view password when entering
3. Password remains visible

OBSERVED RESULT
Password is visible and remains visible.

EXPECTED RESULT
Only show the password when the 'eye' icon is pressed by the mouse. When releasing the mouse button or moving away, obfuscate the password again. (Similar as is done in Windows 10).

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION

Comment 1 David Edmundson 2020-02-04 14:57:41 UTC

It behaves as designed.