yogeshpaliyal/KeyPass

After leaving the app, the user is still logged in

Closed this issue · 1 comments

Is your feature request related to a problem? Please describe.
The problem that I encounter very often is that the app does not lock after I leave the app. This makes a problem from security perspective as if I borrow my phone and forget to kill the app, they are able to get access to my passwords and 2FA.

Steps to reproduce:

  • I open the app.
  • Type my password. -> now I see list of entries/2FA
  • Now I go "home" on android
  • ...
  • I lock my phone, do anything, and maybe hand my phone to someone else
  • ...
  • If anyone has my phone unlocked they are able to go to recent apps and open KeyPass
  • If they do so they are presented with all the entries, without the need to enter the password

Describe the solution you'd like
I would like to have a setting in which I would be able to specify how long time to pass after closing the app so that the app will ask for password again

Describe alternatives you've considered
Maybe it can be a default thing that any time the app is not running in the foregorund it should be "locked" and therefore a password needs to be entered to unlock it

Additional context
I have tested it on v1.4.32 on Samsung with Android 14 and Redmi with Andorid 10. In both cases the same thing happens. Not sure if this is a feature request or bug report.

Thanks for submitting your first issue, We appreciate your input and will review it soon.