Bug 434321

Summary:	Lock screen should clear the password entered when left idle
Product:	[Plasma] plasmashell	Reporter:	Mohammed Sameer <glifwentry>
Component:	Screen locking	Assignee:	Plasma Bugs List <plasma-bugs-null>
Status:	CONFIRMED ---
Severity:	wishlist	CC:	alois1, bshah, justin.zobel, kde, nate
Priority:	NOR
Version First Reported In:	6.2.4
Target Milestone:	1.0
Platform:	Neon
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description Mohammed Sameer 2021-03-12 14:50:47 UTC

SUMMARY
Lock screen doesn't clear the entered password, when left idle without pressing "enter" key to login.

STEPS TO REPRODUCE
1. lock the screen
2. enter password
3. leave the computer idle for few minutes

OBSERVED RESULT
The entered password is still present.

EXPECTED RESULT
The entered password is cleared, after leaving the computer idle for some time.

SOFTWARE/OS VERSIONS
Operating System: KDE neon 5.21
KDE Plasma Version: 5.21.2
KDE Frameworks Version: 5.79.0
Qt Version: 5.15.2
Kernel Version: 5.4.0-66-generic
OS Type: 64-bit
Graphics Platform: X11
Processors: 4 × Intel® Core™ i3-5010U CPU @ 2.10GHz
Memory: 3.8 GiB of RAM
Graphics Processor: Mesa Intel® HD Graphics 5500

ADDITIONAL INFORMATION
The issue is also present in SDDM login screen.

Comment 1 Justin Zobel 2021-03-18 05:28:47 UTC

Confirmed, the password is left in the box and is not cleared.

While it is the user's responsibility to keep their machine secure I do feel that sane defaults should improve the user's security without impacting their experience.

I believe a default timeout needs to be implemented to assist users with keeping their machines secure.

As for SDDM that is not a KDE project. I'd suggest submitting a request on their bug tracker for that.

Comment 2 Bug Janitor Service 2021-03-18 15:39:16 UTC

A possibly relevant merge request was started @ https://invent.kde.org/plasma/plasma-workspace/-/merge_requests/724