Skip to content
This repository has been archived by the owner on Oct 17, 2020. It is now read-only.

en | Tips | Auto Submit Warning

luckyrat edited this page Jan 14, 2013 · 1 revision

Be cautious of automatically submitting login forms - it is convenient but slightly more risky than manually clicking on the login button.

It's tempting to enable KeeFox's fully automatic mode where loading a website will cause KeeFox to automatically fill the login form and submit it without your intervention. However, there are good reasons why this behaviour is disabled by default so please think carefully before enabling it.

KeeFox will only auto-fill (or submit) forms that match the domain name of the entry in your KeePass databases but it is possible for you to configure KeePass entries in such a way that they are considered matches on the wrong websites so the first question you need to ask yourself is whether you are confident that you will not mis-configure individual KeePass entries.

Assuming KeeFox behaves as designed and submits forms only on the correct website domain, you must still consider whether there are other forms on the website which you would not want KeeFox to auto-submit. For example, it is technically feasible for a website to design comment or contact submission forms in such a way that KeeFox thinks they are a login form. I've not seen that worse-case example in practice yet but I have seen KeeFox fill in other forms incorrectly from time to time (such as a "change your personal details" form; auto-submitting that form could cause unexpected and undesirable changes to account data).

Some websites structure their login process in a way that means you are redirected to a login form straight after logging out. In this case, auto-submitting a matched login could cause you to be unable to logout of the website. You may be able to work around this limitation on some websites by configuring the matching URLs for the particular KeePass entry in a way that ensures the "log-in after logging out" page is not a match.

If you are keen to save the maximum number of clicks while browsing the web, you should consider manually enabling auto-submit only on each KeePass entry for websites on which you have thoroughly evaluated the above caveats.

WARNING!

OLD INFORMATION

The information in this Wiki is out of date.

It is only of interest if you are using the old add-on called KeeFox in a very old (insecure) version of Firefox or other browsers based on the old Firefox XUL technology.

Read the manual for Kee and KeeBird instead.

Clone this wiki locally