Dec31

Firefox Addon for Clipperz Password Manager

Keep your data to yourself!

Clipperz Community Edition is a community driven, free and anonymous online password manager based on on the Open Source Javascript Crypto Library. Clipperz is an online service so you can access your passwords from everywhere. Your data is stored decrypted on a server and will be encrypted locally within your browser using your personal passphrase. This ensures that only you can access your data! The Clipperz Community Edition is Open Source, so you can browse the code and see what is going on or you can event host your own Clipperz Community Edition. This is a huge profit since there is no third party involved! If you are interested in hosting your own Clipperz Community Edition backend, refer to the building and installing steps at GitHub.

Clipperz Integration

Because of Clipperz is a javascript application running as a webpage within your browser, it does not integrate well into your daily process. Before you can proceed an authentication process, you have to login to Clipperz, look for the corresponding password entry and copy & paste your username and password. Clipperz introduces some tools where you can easily create so called direct logins using a javascript bookmarklet. Since this is very inconvenient and time consuming I decided to write a Firefox Addon with some beneficial features:

  • Integrates Clipperz into the Mozilla Firefox browser, no need to open the Clipperz Community Edition webpage.
  • Automatically fills in your username and password for any registered direct login.
  • Provides easy access to add, modify or delete a direct login of the currently active webpage.
  • Integrates a password generator into the Firefox browser.
  • Enables auto-login for Clipperz webpage and widget if activated.
  • Connects either to the public Clipperz portal or to a third party hosted Clipperz Community Edition.
  • Hopefully opens the way to even more features …

Be Careful!

Next to those benefits, you should notice the possible drawbacks. More features and the browser integration might degrade protection and security of your data stored by Clipperz:

  • The auto-login is really comfortable but it is  an open door to your Clipperz account! Enabling your auto-login means that everybody who can access your browser can also access your data stored within Clipperz! You can disable the auto-login in the widget’s preferences. In this case, you will be prompted for your username and password the first time you start your browser.
  • Both, the widget and the Clipperz webpage are designed to encrypt your data on-demand. That means, only if you request a password, the decrypted data will be downloaded and encrypted locally using  your passphrase. The Clipperz addon initially downloads and encrypts the URLs of  each of your registered direct logins in oder to match a webpage, your stored a direct login for. If an appropriate webpage was found, the data of this direct login will also be downloaded, encrypted and automatically pasted into the according username and password fields. It is unlikely that the addon matches a wrong webpage, but I will not guarantee, that this could be harmfully used for an exploit or anything else.
  • In any case, you should notice that you degraded the level of data security Clipperz provides, if using this service in a traditional way. I assume no responsibility and liability for any damage, data loss or data thievery. Please use the Clipperz Firefox addon at your own risk!

Screenshots

Get Involved!

The Clipperz project is an awesome and pretty useful Open Source project from which everyone can profit! Most parts of this Firefox addon are based on the sources of the Clipperz community edition. So don’t forget to support those guys doing such a great work! I would also highly appreciate each kind of support to further improve the Clipperz addon. Like the Clipperz Community Edition, the addon is released under the AGPL. Feel free to give your feedback, add issues or access the code at github.

Download the Firefox Addon

The latest release of the Mozilla Firefox Addon can be downloaded here. Note that this project is under ongoing development. If you want to checkout the latest features, you might want to refer to github.

  1. Marco Barulli Says:
    January 1, 2012 at 11:29 pm

    Sounds great! Thanks!
    Where can it be downloaded?

  2. Daniel Morlock Says:
    January 2, 2012 at 10:32 am

    There are still some bugs and I’m really busy these days, so give me some time to finish the first release! For now, you can checkout github: https://github.com/danielmorlock/clipperzwidget.

  3. Thanks! I will certainly look into it and get back to you.
    Happy New Year!

  4. Natanji Says:
    June 14, 2012 at 1:47 pm

    The addon doesn’t seem to work for me. When I click the clipperz item, I immediately get an error message saying “Could not login to the Clipperz Server: Clipperz.PM.DataModel.User.exception.LoginFailed”. It doesn’t even take as long as a “normal” failed login process which first has to e.g. collect entropy, but fails really immediately.

    I’m using the Community Edition and double-checked the set URL. It is definitely correct: I get to the correct page (on my own server) when I choose “Goto Clipperz Web” in the menu.

  5. Hello Daniel, here is the output from the dump; I can’t really make much
    out of it at all:

    clipperz_widget [debug]: using proxy url https://clipperz/beta/../index.php
    info: startup info: Linux
    clipperz_widget [debug]: login using username “*******”
    clipperz_widget [debug]: updating status 3

    If I visit the index.php myself, I only get a site with the output
    “{“result”:{“result”:null}}”. So far, I have used Clipperz via the
    index.html file in the beta/ subdirectory only and that worked fine, and
    from the responses to
    https://github.com/clipperz/password-manager/issues/19 I am assuming
    that this is the intended setup. Any ideas?

  6. Daniel Morlock Says:
    June 15, 2012 at 10:14 am

    Hi Natanji, can you try to use “http://clipperz/beta/” as Clipperz Server URL?

    • Natanji Says:
      June 15, 2012 at 2:25 pm

      I tried, but it still doesn’t work. Same behaviour, same dump result.

      • Daniel Morlock Says:
        June 15, 2012 at 2:46 pm

        Can you tell, where your index.php is located? Following your first comment, it must be at “http://clipperz/index.php”, is that correct?

      • Natanji Says:
        June 15, 2012 at 4:15 pm

        Yes, that’s exactly where it is. When I open it manually I just see the text {“result”:{“result”:null}}, but as far as I know this is the expected behaviour.

Leave a Reply

You must be logged in to post a comment.