Bug 434321 - Lock screen should clear the password entered when left idle
Summary: Lock screen should clear the password entered when left idle
Status: CONFIRMED
Alias: None
Product: plasmashell
Classification: Plasma
Component: Screen locking (other bugs)
Version First Reported In: 6.2.4
Platform: Neon Linux
: NOR wishlist
Target Milestone: 1.0
Assignee: Plasma Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-03-12 14:50 UTC by Mohammed Sameer
Modified: 2024-12-18 19:03 UTC (History)
5 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mohammed Sameer 2021-03-12 14:50:47 UTC
SUMMARY
Lock screen doesn't clear the entered password, when left idle without pressing "enter" key to login.

STEPS TO REPRODUCE
1. lock the screen
2. enter password
3. leave the computer idle for few minutes

OBSERVED RESULT
The entered password is still present.

EXPECTED RESULT
The entered password is cleared, after leaving the computer idle for some time.

SOFTWARE/OS VERSIONS
Operating System: KDE neon 5.21
KDE Plasma Version: 5.21.2
KDE Frameworks Version: 5.79.0
Qt Version: 5.15.2
Kernel Version: 5.4.0-66-generic
OS Type: 64-bit
Graphics Platform: X11
Processors: 4 × Intel® Core™ i3-5010U CPU @ 2.10GHz
Memory: 3.8 GiB of RAM
Graphics Processor: Mesa Intel® HD Graphics 5500

ADDITIONAL INFORMATION
The issue is also present in SDDM login screen.
Comment 1 Justin Zobel 2021-03-18 05:28:47 UTC
Confirmed, the password is left in the box and is not cleared.

While it is the user's responsibility to keep their machine secure I do feel that sane defaults should improve the user's security without impacting their experience.

I believe a default timeout needs to be implemented to assist users with keeping their machines secure.

As for SDDM that is not a KDE project. I'd suggest submitting a request on their bug tracker for that.
Comment 2 Bug Janitor Service 2021-03-18 15:39:16 UTC
A possibly relevant merge request was started @ https://invent.kde.org/plasma/plasma-workspace/-/merge_requests/724