Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Register
  • Sign in
  • gnome-shell gnome-shell
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 2.1k
    • Issues 2.1k
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 147
    • Merge requests 147
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • GNOMEGNOME
  • gnome-shellgnome-shell
  • Issues
  • #5966
Closed
Open
Issue created Oct 10, 2022 by 0unknwn@0unknwn

On-screen keyboard shows password as suggestion

Affected version

  • Fedora 37 beta
  • GNOME 43.0

Bug summary

When typing my password to some password field in GDM or in the terminal, the on-screen keyboard remembers it and suggests it the next time. This is a great security issue as anyone with physical access could break into my system, if I used on-screen keyboard once for typing in my password.

Steps to reproduce

  1. Activate on-screen keyboard (in GDM or gnome-settings)
  2. Type in your password to login or with sudo
  3. Type the first characters of your password

What happened

The on-screen keyboard logged the password and suggests it in plain text. Sometimes it is not even needed to type the first characters.

What did you expect to happen

Passwords shouldn’t been saved to suggestions.

Relevant logs, screenshots, screencasts etc.

Edited Oct 14, 2022 by 0unknwn
Assignee
Assign to
Time tracking