KeePass Helper adds hostname information to page titles in Firefox

Martin Brinkmann
May 6, 2015
Updated • May 6, 2015
Firefox
|
4

One of the great features of the password manager KeePass is its support for a global login shortcut. This speeds up the login process on websites and in applications as you just have to press Ctrl-Alt-a to fill out the sign in form on the site or application instead of having to copy and paste username and password manually into the form.

Plugins are provided for various browsers which improves the integration of the password manager in the browser.

The global hotkey is an alternative to that and while it works well on many sites, you may run into issues on others.

KeePass uses the title of the web page or window to find a suitable match in its database when you use the shortcut.

The shortcut won't fill out information if a match cannot be found and will display a selection menu if multiple entries are found.

The main requirement for matching window titles to KeePass database entries is that the title field in KeePass matches (part of) the window title.

This works well on sites that use unique page titles but if you want to use the shortcut on a site that uses generic titles that are used by others as well, then you may run into issues.

For instance, generic titles such as Welcome, Homepage or no page title at all make matches difficult.

That's where KeePass Helper for Firefox comes into play. The browser extension adds the hostname of the site in question to all pages in the browser so that you can use it as the title in KeePass to get guaranteed matches.

hostname in page title

KeePass Helper ships with two options that help you customize the information it adds to the page title. Instead of adding just the hostname, you may switch to adding the short url or full url of the page instead.

The second option allows you to change the separator "-" that is displayed before and after the hostname or url to something else.

The extension has been designed specifically for password managers like KeePass but it can be useful to Firefox users even if KeePass or another password manager that benefits from it is not used.

Since it displays information about the hostname or url, you may use it for security checks to make sure you are on the right page.

Some reviewers on Mozilla's add-on repository have reported that they would like to see a trailing slash after the hostname to prevent phishing sites to take advantage of that.

One easy option to resolve that is to switch to short or long urls instead. Keep in mind though that only the page title is being matched. If a phishing sites adds the information to the page title then it would still be a match. Then again, you would see two hostnames in the title which should raise red flags immediately.

Summary
software image
Author Rating
1star1star1star1stargray
no rating based on 0 votes
Software Name
KeePass Helper
Landing Page
Advertisement

Tutorials & Tips


Previous Post: «
Next Post: «

Comments

  1. Rocky said on May 8, 2015 at 6:43 pm
    Reply

    Looks interesting although my workflow when using Keepass is:

    1. Select log-in URL from Keepass Window ( obviously these need to be populated when setting up the entry in Keepass).
    2. Select Ctrl-U to automatically start default browser and navigate to URL.
    3. Use “Global Auto-type selected entry” shortcut – see first field in second column of Martins first Screenshot ( I have mine set to Ctrl-Alt-V).

    I normally do not have Keypass set to auto-log in as I prefer to see the details before accepting.
    This avoids any browser add-ons.

    Keepass is great but for me the biggest issue is tryign to keep multiple Keepass databases synchronise ( two PC’s, phone , tablet). I do not want to store Keepass database in the cloud as if I am going to do this I may as well just use LastPass.

  2. CHEF-KOCH said on May 7, 2015 at 2:17 am
    Reply

    > which has full access to the KeePass database

    But you need full access to read/write entries. As long you can control the port and monitor the traffic I don’t see any problem.

  3. anothername said on May 6, 2015 at 11:06 pm
    Reply

    This is interesting:
    http://sourceforge.net/p/keepass/discussion/329220/thread/ecff27ab/
    (uses UIA to access browser from KeePass without need for extensions)

  4. Dan82 said on May 6, 2015 at 10:15 pm
    Reply

    That’s not a bad idea and it’s definitely more secure than the KeeFox extension, which has full access to the KeePass database. On the other hand, the latter extension is a lot more convenient to use.

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.