4 ms·

So what happens if I lose / don't remember my Master password ? If it's used to encrypt my data I suppose you can't reset it ?

• hyyypr 15y ago
  Hey ! We have chosen a strong security architecture, so we have no way of decrypting your data. If you loose your password, you're screwed. :)
  • dawson 15y ago
    I implemented a similar architecture, but within three weeks http://i.imgur.com/hfoyz.png http://i.imgur.com/hfoyz.png :)
    • Lenad 15y ago
      How are encrypted the users' master passwords ? (because "one key to to encrypt them all" is a bit dangerous, isnt it?)
      • dawson 15y ago
        Some more information here http://goo.gl/YlFkQ http://goo.gl/YlFkQ but no, each data-key (master) is unique to each user and stored outside of the application and network in an encrypted store, also all PID is encrypted and non-associative. Of course, I would prefer if users didn't want a restore option, however, usability sometimes trumps security :) Lost your password == lost all your data, just doesn't cut it with users IRL (I found).
    • BrowniesG 15y ago
      We never ever store, or transmit over the network the user's master password nor any of its derivatives, therefore we don't nee to encrypt it. The user's master password is not encrypted, it is used to create the key to encrypt and decrypt user's data, and the encryption key created from the master password, as a derivative of the master password, is never stored or transmitted. This way, we can assure our users that even us cannot ever access their data.