Master Password Protected Mode to Protect your Profile
-
The rationale is atm:
The profiles are not protected because you only need to log in to another OS account to protect your data, provided you don't share your OS account.My opinion about that:
That's BS because even if you do not share your OS account, real profile protection needs encryption, otherwise it is not protected at all because everyone with an administrator account can read your data. On Windows it is always possible to get administrator rights, as long as you can boot from an USB stick / DVD / other external medium. It is tricky but possible, the tools to do that are freely available in the internet (If done right, you don't even need tools, only a standard boot disc). I did that many times because users only had one account (i.e. they were basically browsing as Administrator!) and forgotten their PW.Note:
Profile protection is different from Password protection. That can and IMHO should be done with a master password and not be left to the system to protect. -
Lack of master password is the only reason why I don't save any password in Vivaldi...
This would be a great addtion in terms of security to the Vivaldi browser.
-
Dear Vivaldi devs,
I love Vivaldi, but I will uninstall it from my work PC. I need a master password for a specific profile, I have no options, nor workarounds. I have too little memory to keep more than 1 browser, so I'm forced to switch to another browser with a master password feature.Dear members of the community,
if this is not the correct place to provide feedback to the devs I apologize. If so, I'd appreciate if you can correct me.Cheers!
-
I have exactly the same problem:
At my work PC I am having my work profile which syncs between devices and I would like to use sometime things that I have synced from home, however, those should be at least password protected against my work admins.
Would be really great to see it in Vivaldi. -
Same situation here:
I would love to sync my Home profile at my work PC.
We sadly just have one Windows profile per PC so everyone can access this data, but I also work from home from time to time so I need to use two different profiles where it would be better to use just one.
-
This is a function that I long for deeply. It would make Vivaldi an unsurpassed browser. I could safely use it at work. All those cookies and active logins, password manager, extensions, panels (whatapp…)… And being able to remotely erase it in case of loss… WOW.
I hope to see it in the pipeline.
-
Same here.
I would like to use a personal profile and a work profile. I am surprised that there is no such function in Vivaldi.
-
@tgilloktire
Hi, you can but you need two different accounts, too.
I have a mib2 and a mib3 account with different recovery mail addresses.
This is needed for sync.
Create a new profile, or use the default profile, on your work PC and sync it with your "Work" profile.
I am not sure how separat they are but everybody logged in to your Windows account can read anything anyway.Cheers, mib
-
I intended to switch to Vivaldi because I heard good things about it.
I am STUNNED that a modern browser doesn't have a master password......
That means anyone that gets behind my computer can start Vivaldi and can start browsing as if he was me...Yes, I know a hacker with access to my computer will be able to get it anyway.
But now even an unexperienced colleague or whoever can.... -
@EliteIman said in Master Password Protected Mode to Protect your Profile:
This is a part of the minimum security of a browser, and I don't think this is a feature that needs a debate to be implemented or not. I for one won't be able to use Vivaldi to its full capabilities at work until this is in place.
I am STUNNED that a modern browser doesn't have a master password......
How do I encrypt my profile on Chrome or Firefox (preferably Chrome), I'm not aware of how to do this, but honestly I haven't looked.
Edit 20200530T0359-04: Well, @SCS66 hasn't logged in but that one time 3 months ago; I'm guessing this won't get a reply unfortunately. At some point I'll try to find the time to research which, if any, browsers do this. Maybe I'll get lucky with a reply from @EliteIman.
-
@BoneTone I've used Firefox for many years, and appreciate having a master password to protect the many saved passwords I have. I just installed Vivaldi, and like the look of it, but am going to uninstall immediately, as a web browser that stores website passwords un-encrypted is a massive security issue, and I'm just not prepared to compromise on security. So back to Firefox. But when (and if) Vivaldi is prepared to encrypt and protect my saved passwords with a master password, then I will revisit this browser.
-
Not just for a profile on Vivaldi, but if you can block access to Vivaldi with a password, on Windows f.exmpl.with this, what can be a workarround.
-
@miguelnixon I'm not sure where you got the idea that Vivaldi stores passwords unencrypted but that is incorrect. Nowhere are passwords stored as cleartext by Vivaldi.
I think perhaps you are confusing the concepts of encrypting something and requiring authentication for access to something. Vivaldi, like many browsers and other applications, relies upon your operating system to authenticate access to its resources instead of writing its own authentication scheme.
Should you desire an additional layer of authentication in order to use your saved passwords, there are many extensions that provide this functionality, and several very popular ones that many people here use. Personally, I just don't bother with storing passwords, so I cannot give you a personal recommendation on those. If you start a new thread, however, asking for guidance, I'm certain the folks here would gladly help you choose one that suits your desires.
-
i asked for this already 2.5 years ago.
https://forum.vivaldi.net/topic/25540/master-password
great to see such rapid progress.. -
@schreck And I asked for a vertical bookmark bar over five years ago. There are literally thousands of requests and bugs, and just a tiny corps of dedicated software engineers trying to fulfill some of them a bit at a time.
-
@schreck and it was closed as a duplicate because this thread was created first. Everybody has their pet features they want to see implemented. That this feature request hasn't been doesn't invalidate all the progress that has taken place.
I post from my phone frequently, which likes to change "the" to "three". If you see three or similar, I probably meant "the". I use swipe, so typos can be totally unrelated words to what I intended. Knowing this should help you read through my typos.
-
This post is deleted! -
Since this is not happening, I have to use firefox at work!
-
This is the main reason I refuse storing passwords or other data on Vivaldi or any browser. The only one that has this is Firefox but its limited to logins only.
I think I would be great to actually encrypt the whole profile setting, including not only passwords, but all the other info used on forms, history, etc.
This was actually requested to Chrome developers before, but Google had no interest on anything that would lock them out of users data. They don't even encrypt passwords for that reason. Before you think this makes no sense because an attacker with access to your computer means already game over...not quite. There is a reason why shell or FTP pieces of software have a master password for the same reasons a browser should.
Data resting in the drive is potentially dangerous. Data in memory tends to be a bit more safe while it can't deter a good attacker most spyware or malware will just scan your hard rive for data, that includes browsers data and getting your logins from browsers is extremely easy. With a master password at least data on rest is encrypted and only lives in memory while its unlocked, you can have different settings that unlocks the data back after inactivity and with a more simple PIN.
Example, you unlock the master password when Vivaldi starts, at this point data is in memory. You browse as usual but after 30 minutes, passwords get locked with a temporary pin that requests user input on the screen if Vivaldi needs to access them, or you can pick for full locking. This has potentially security benefits. If you share the computer, or someone else logs in without authorization, all the data is encrypted for your Vivaldi profile. A malware hitting your system while using Vivaldi, would not be able to simple pick your profile data from the hard rive either. It would require far more work assuming data is properly encrypted in RAM memory while in use.
This also lets you securely transfer profiles to different systems. I'm surprised Vivaldi makes to many tiny improvements in GUI stuff but doesn't on the bigger issues. I assume the reason is that big changes like that cannot be done by Vivaldi since they just follow Chromium and can only be limited to GUI changes. I see no other reason why Firefox has this but not Vivaldi. And before you say MS Edge doesn't either, they actually store the logins in the OS differently which makes it more secure than what Chrome does. To see passwords you need your Windows authentication details which means its under an extra layer of security. Chrome has by far the worst implementation when it comes to log in security. It should ring a bell that even today Chrome does not even have a setting to clear all your data when you close the browser. They don't care about making things that lock them out of users data. That is the reason Chromium password storage is to terrible bad.
-
@BoneTone said in Master Password Protected Mode to Protect your Profile:
@schreck and it was closed as a duplicate because this thread was created first. Everybody has their pet features they want to see implemented. That this feature request hasn't been doesn't invalidate all the progress that has taken place.
no it wasnt! are you not able to read the date?
whats the status on the after 3 years, anybody considering this!?
vivaldi, security, privacy nr.1 topic, .. yeah right...
