It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

What is askpass.exe?

I am constantly annoyed by an application that asks for my password. The executing file is askpass.exe. It has a logo that looks like a cheap China version of the source tree logo. Is this an official software from atlassian or is it malware ?

4 answers

1 accepted

6 votes
Answer accepted

The first result of Googling for this says that it is a SourceTree component.

Check and correct your stored credentials in Tools\Options\Authentication to make it stop asking for your password all the time.

minnsey Atlassian Team Jun 11, 2015

This is correct, askpass.exe is part of the SourceTree distribution. It is provides a GUI to allow SSH via Git to ask for a username's password to access their SSH key, via the SSH_ASKPASS variable.

Like # people like this

I also have this issue. There is definitely a bug somewhere in Sourcetree authentication. The AskPass.exe connection issue warning has been randomly popping up from time to time for about a month. It's really annoying.

I verified that the stored credentials in Tools\Options\Authentication are correct. It says "Authentication OK" at the bottom left. However, I do notice that the button "Refresh OAuth Token" does not work. After a few redirects there's a link like http://localhost:34106/?state=authenticated&code=KjjPkTZFBLmbp4Q2vK in Chrome that warns:

This site can’t be reached

localhostrefused to connect.

ERR_CONNECTION_REFUSED

After I restart Sourcetree my account will be logged in properly, and sometimes I need to do that to be logged in.

To follow up, the redirect has stopped going to "This site can't be reached" and seems to be resolving properly. Also the disconnections seem to be much less frequent. The last one seemed to relate to a Sourcetree incident (happened at the same time as a minor service issue posted on the website). There hasn't been an update in SourceTree since November so maybe a backend change improved it.

(Also to clarify, the warning popups occurred when Sourcetree is running in the background).

I also get it multiple times a day, and it's very annoying.  

Like # people like this

And this is expected behavior? From commercial software? I know that Sourcetree itself is free, but with all of the subscription fees that we pay for other Atlassian software, you'd think that they would be able to fix a bug that's bad enough that I'm just going to switch to Git Kraken and stick with that.

Like frozenkingdomcomp likes this

OK, thanks for a quick reply. Of course I tried google first. The file is signed and this is a good sign.  However there is loads of sites that writes about suspicious files. All of them advertise different tools they want me to install. If I would have spent more time on http://systemexplorer.net/ maybe I would have trusted this answer right away. But I choosed to ask in a more trusted forum (here).

Giving someone else access to my employers source code through malware would have been pretty embarrassing.

So is there any way to prevent this virus-looking popup that kicks me out of whatever app I was actually using when Sourcetree decides to do this shady shit? Or do I have to just stop using Sourcetree? This is a terrible bug and it has been around for like 5 years!

To be fair, I'm not sure that it's popping up due to the same bug as 5 years ago.

It wasn't happening when I first installed, but last year it was happening quite frequently, an average of once a day.  It's still popping up for me but now only very occasionally, around once a week. 

Unfortunately it is not documented

https://confluence.atlassian.com/search/?query=askpass.exe


Since I've brought it up as a community question, and see others also experience it, problably the next step is to file it as a bug report? But I do see that there are ~19 reports regarding askpass.exe.  https://jira.atlassian.com/browse/SRCTREEWIN-4370?jql=project%20%3D%20SRCTREEWIN%20AND%20text%20~%20%22askpass.exe%22 One comment says "AskPass.exe pops up about every 15 seconds." Luckily that is not the case for me.

Unfortunately, the Jira pages for Sourcetree are a complete waste of space. I reported issues THREE years ago that, in my consideration were worthy of a reasonably prompt fix, have never been fixed. People in the team I work in have experienced this askpass issue. One temporarily resolved the issue (coincidence?) by updating Sourcetree to 3.3.8, but the error has now re-appeared and another team member now has the problem :( . My solution? Stop using Sourcetree! I now use GitExtensions.

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Sourcetree

Sourcetree for Windows - CVE-2019-11582 - Remote Code Execution vulnerability

A vulnerability has been published today in regards to Sourcetree for Windows.  The goal of this article is to give you a summary of information we have gathered from Atlassian Community as a st...

4,907 views 0 12
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you