Hacker News Reader

That is kinda worrying, though I don't use that functionality myself. Is there another way that passwords could be passed between apps without using the clipboard?

View on HN

Have the password management app emulate a custom keyboard?

Keepass2Android does exactly that, and additionally auto-fills password and confirmation fields when you focus them with the custom keyboard active. Very handy.

(https://play.google.com/store/apps/details?id=keepass2androi...)

iOS disables custom keyboards for password fields, which is a great idea in most scenarios. This is what prevents Agilebits building a 1Password keyboard extension.

Maybe there could be a way to negotiate a secure channel between a browser and password manager. Say, when setting up, a browser gives you a key to retype into password manager, and then it's used to encrypt the password before putting it in the clipboard.

Adds one more step for setting things up but saves the clipboard as a whole. People using password managers are already people willing to jump through some hoops to set things up, adding one more hoop shouldn't make things worse.

Reply on news.ycombinator.com