Bug 168718 - Word completion privacy/security: Do not collect words from password-protected documents
Summary: Word completion privacy/security: Do not collect words from password-protecte...
Status: UNCONFIRMED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
24.8.7.2 release
Hardware: All All
: medium enhancement
Assignee: Not Assigned
URL:
Whiteboard:
Keywords: needsUXEval, security
Depends on:
Blocks: Password-Protected
  Show dependency treegraph
 
Reported: 2025-10-06 15:41 UTC by MartR
Modified: 2025-10-09 10:49 UTC (History)
4 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description MartR 2025-10-06 15:41:16 UTC
This may go back to maybe all versions of LibreOffice and even OpenOffice.org.

When opening a password-protected document, the word completion tool, which is on by default, automatically collects a large amount of alphanumeric information into the word completion list, which persists and remains accessible even after the password-protected file is closed.

At the same time, the "Remove collected words when closing a document" option is off.

For better privacy and security, I recommend, that LibreOffice:

* will not automatically collect words from password-protected files,
* not from digitally-signed files (increased information sensitivity may apply); and
* will not not save these words anywhere in storage;
* should automatically remove word suggestions collected from password-protected files, if a user has chosen to collect words during the document open session for word completion.
* Possibility should be a deny-all option, and a permit-narrow-scope option with checkboxes.

* Maybe also an option to encrypt words collected from password-collected files in RAM memory.

These options could then also be extended to files opened from encrypted disk volumes, and specific cloud sources that may require enhanced security.

The current workaround is only to turn word collection off, while I want to keep it for some open files, and not others.
Comment 1 Dieter 2025-10-06 16:17:42 UTC
MartR, thank you for your report. Let's treat it as enhancement request and ask design-team for further input
Comment 2 Heiko Tietze 2025-10-09 08:51:25 UTC
If opening the document is possible meaning if the password / signature is correct, why shouldn't it possible to let's say continue the work including to collect words? I agree with safety after saving, which means to auto-check the "remove words on close" option.
Comment 3 V Stuart Foote 2025-10-09 10:49:20 UTC
Just toggle the "Remove collected words when closing a document" enabled for password-protected documents and be done with it.

-1