Bug 4322 - Password protect UI with master password or other password
Summary: Password protect UI with master password or other password
Status: RESOLVED WONTFIX
Alias: None
Product: Claws Mail (GTK 2)
Classification: Unclassified
Component: UI (show other bugs)
Version: 3.17.4
Hardware: PC Linux
: P3 enhancement
Assignee: users
URL:
Depends on:
Blocks:
 
Reported: 2020-03-08 22:53 UTC by m1nxxx
Modified: 2020-03-09 12:52 UTC (History)
0 users

See Also:


Attachments

Description m1nxxx 2020-03-08 22:53:13 UTC
I think it would be a nice feature to password protect the GUI. Maybe have an option so the UI locks after a set time. Now, even if you use a master password, people that can physically access the computer are able to cancel the password-dialog and read even encrypted e-mails. I know we can do this globally with screen-locks and power managment, but I also think many  have need to do this only on the email-program.

Thank you for a great application!
Comment 1 Ricardo Mones 2020-03-09 12:52:43 UTC
Hi m1nxxx,

That's called basic security practices to protect your data and your password¹: lock your sesion when leaving and don't share your account password.

People which can physically access the computer and can manage a Claws Mail instance to cancel the password dialog, as you suggest, already has access to everything in your account including your messages on the file system and, even worse, your PGP private and public keys.

Yet another password to lock the GUI won't prevent them to read the messages.

¹ https://security.berkeley.edu/education-awareness/best-practices-how-tos/security-tips/security-basics-101

Note You need to log in before you can comment on or make changes to this bug.