2 ms·
How are encrypted the users' master passwords ? (because "one key to to encrypt them all" is a bit dangerous, isnt it?)
by Lenad 15y ago
How are encrypted the users' master passwords ? (because "one key to to encrypt them all" is a bit dangerous, isnt it?)
- dawson 15y agoSome more information here http://goo.gl/YlFkQ http://goo.gl/YlFkQ but no, each data-key (master) is unique to each user and stored outside of the application and network in an encrypted store, also all PID is encrypted and non-associative. Of course, I would prefer if users didn't want a restore option, however, usability sometimes trumps security :) Lost your password == lost all your data, just doesn't cut it with users IRL (I found).