Master Password Protected Mode to Protect your Profile

[ingo-steinke]

What is the current workaround to save passwords securely in Vivaldi? Is there a recommended password management plugin?

Or is this another reason to switch back to Firefox as the default development browser?

[Zalex108]

@ingo-steinke

Hi,
Look at Passwords section

https://forum.vivaldi.net/topic/51704/guide-v-backup-extra-steps

[ingo-steinke]

@Zalex108 said in Master Password Protected Mode to Protect your Profile:

@ingo-steinke
Hi,
Look at Passwords section
https://forum.vivaldi.net/topic/51704/guide-v-back

Thanks! That's very helpful, both for sticking to Vivaldi and maybe also for migrating back to Firefox.

[Zalex108]

@ingo-steinke

This will help for any Browser / OS / Device.

[paul1149]

Would this work for some of you? Simply 7-Zip your Default profile, or sensitive subfolders within it if you want to make the process faster, with password protection. Then delete the profile. Before you open Vivaldi next time, restore the profile.

I've cut a short video on it. I'm using Linux with the KDE desktop, and everything is built into the context menu. The voice on the video isn't too clear.

https://videy.co/v?id=KRsaDFk4

[mopani]

@awking This is an essential feature for protecting passwords at rest.

The Chromium Dev team rationalizes this as duplicative effort because the Windows O/S already protects the user account, and the password store is encrypted on disk by the Windows login crypt.

However, this does not protect passwords stored on disk from trojans and viruses, because they can also access the same Windows API for decrypting the password store on disk.

Adding a "master password" as an encryption key or to "salt" the Windows crypt storage prevents trojans and viruses from decrypting the passwords stored on disk.

This is difficult to do downstream of Chromium because it requires adding new code that has to be maintained to override the Chromium code. But it can be done, and in my view would be a significant distinctive to set Vivaldi apart from all the other Chromium-browser derivatives.

[Pesala]

@mopani You should have replied to DoctorG, not the OP.

This request is tagged as WILL NOT DO so look for other solutions.

@DoctorG said in Master Password Protected Mode to Protect your Profile:

@pauloaguia said in Master Password Protected Mode to Protect your Profile:

tagged as WILL NOT DO.
So I guess I never will be...

Yes, the feature request i found in bug tracker was closed, they will not add it. May be consume too much human power and time for small team or something lese. I do not know.
May be chat with a dev explains:

Passwords are encrypted using an OS-login-specific encryption key, only usable when you have logged into the OS.
Anyone with physical access to the login session, or is able to install malware on your computer would be able to work around such extra passwords.

[DoctorG]

@mopani said in Master Password Protected Mode to Protect your Profile:

However, this does not protect passwords stored on disk from trojans and viruses, because they can also access the same Windows API for decrypting the password store on disk.

Master Password Protection? If you have a virus/trojan/malware on your PC, it can record keystrokes, means it gets your Master password.
A master password protects you only against colleagues, your children, freiends or partners spying on you or doing other bad things on your PC.

[DoctorG]

OffTopic: I guess a better protection would be a hardware token (Smartcard, Nitrokey, Yubikey etc.) and a PIN to unlock sensible data on browsers. But that would be an other feature request and discussion not applicable in this thread.

[mopani]

@Pesala Thanks for the correction.

[mopani]

@DoctorG That is sound reasoning and I agree that in that light a master password adds little and adds a false sense of security. Thanks.

[MadMaddox]

Hello, first of all I wanted to congratulate the Vivaldi team for producing the most beautiful browser ever. It is possible to implement additional security in the password manager as, for example, in Firefox.

Without this "super password" it is impossible to view the PWD saved in the browser.
Vivaldi:

[Pesala]

@MadMaddox If I am not mistaken, one already has to enter one’s Windows log-on password when viewing passwords for the first time.

I do not use one, as I have other ways to protect sensitive data (I use a VeraCrypt drive and install Vivaldi as a Standalone version on that).

[MadMaddox]

@Pesala
Hello Pesala, I just tried and asked nothing, once i clicked saved sited (with saved pwd) i joined directly.

[mib2berlin]

@MadMaddox
Hi, there is an old feature request from 2018 with many votes but tagged from the Vivaldi team as "Will not do".

https://forum.vivaldi.net/topic/24238/master-password-protected-mode-to-protect-your-profile

If the Chromium developer decide to implement it we will get this with an upstream update but the Vivaldi developer have not the resources to do this, I fear.

Cheers, mib

[MadMaddox]

@mib2berlin
Hi mib2berlin, thanks a lot for the link, i will upvote too
To be true, i Don't think is a resources problem, would be an easy feature to add, i guess.

[MadMaddox]

Why the most beautifull internet browser wont add this feature? Cmon team, do this, security is the first thing...

[mib2berlin]

@MadMaddox
The Vivaldi team decide to leave these features to the Chromium developer, like adding extensions to the mobile version.
I read the update to a new Chromium version alone is so much work they have to jump two Chromium versions to get this done.
I don´t need this but I hope it gets implemented at some point.

Cheers, mib

[Pesala]

@Pesala said in Master Password Protected Mode to Protect your Profile:

This request is tagged as WILL NOT DO so look for other solutions.

[DoctorG]

On Vivaldi's login database is unlocked and decrypted after Windows login, the password in password manager of Chromium or Vivaldi is only needed to be able to see it.