krissrex/google-authenticator-exporter

Add password protection support

Closed this issue · 4 comments

Hedwig7s commented

Having the app freely available to anyone on your computer is a security hazard

krissrex commented

I'm not sure I understand you.
What app, this code?

Yes, you should delete the files and secrets when you are done exporting.

I will not encrypt the output from this program, because you need the results in cleartext when migrating into other authenticator applications.

I could print a reminder at the end, however, with a warning to remove the files after the user is done.

Hedwig7s commented

I'm not sure I understand you. What app, this code?

Yes, you should delete the files and secrets when you are done exporting.

I will not encrypt the output from this program, because you need the results in cleartext when migrating into other authenticator applications.

I could print a reminder at the end, however, with a warning to remove the files after the user is done.

Add the ability to have a prompt for a password/pin when opening the app

mrambossek commented

Add the ability to have a prompt for a password/pin when opening the app

what app? what you are saying doesnt make sense?

krissrex commented

The sensitive data is the QR, your URI from the QR, and the outputs (text or QR images) from this application.
Running the application itself does not expose any secret data.