Secure Notes visible in View even when Master PW is enabled for editing

Ask the Community Password Manager
1

In android, when I enable Master PW confirmation for editing, I can still select View option and the entire note is visible without entering the MPW. In Lastpass, the note is not visible until the MPW is entered (assuming MPW confirmation is enabled).
As a matter of security, I would prefer the secure note not be viewable until the MPW is entered.

3 Likes
2

Thanks for the feedback, the team is planning to revamp the reprompt down the road to protect the whole vault item.

2 Likes
3

Glad to hear that is being worked on in the future. This happens on the desktop client too.

image
image1024Ă—1024 38.8 KB

4

@arttu-karpinlehto Welcome to the forum!

In the meantime, you can create a custom field of the “Hidden” type (select “Hidden” from the custom fields dropdown menu, and then click the :heavy_plus_sign: symbol); if you enter the sensitive information as the value of the hidden field, it will not be possible to view the information without re-entering the master password.

5

This is still a problem on IOS

6

This is now fixed on the desktop (browser extension, at least), but still a problem on mobile (Android, at least). Is this still in the backlog?