Data Security

I have very recently downloaded this and began to add password records. I attempted to go back in today and the master password I believe I selected will not work at all and I need access to my passwords. Is there any way to reset the master password to regain access?

Hi, I have been a user of Enpass since the Windows Phone days. Purchased a licence back then and used to sync to my OneDrive. After being forced to move to Android, I again purchased an Android licence to have my passwords synced between my PC and my Android device. I recently noticed while setting the app up on a new phone that the permissions requested to access OneDrive seem to have increased since the last time I went though the exercise. Enpass needs your permission to: 1. Sign in automatically Signing in with your Microsoft account will automatically sign you in to this app. …

Heello Guys Any one thethere re

I can no longer login to enpass using my iPhone Touch. Is this not an Enpass issue or should I contact Apple?

Hi, Am new with enpass and try to understand it bit better. what if: > I'm in a foreign country, i loose everything, laptop, phone etc... 1. So far connect to my email account (I remember the password) then I can get all the information I saved their. I can actually connect to all my account (fb, etc..) 2. If am using Enpass, what can I do? I will log on a public computer but then I can't access to anything? What did I missed? Thanks for you answer.

This morning I got a prompt stating that Enpass wants to “control my computer through accessibility”. The prompt led off to the Privacy section of System Preferences (which I have locked, and in which, therefore, Enpass is grayed out). I have NOT enabled computer control through accessibility for Enpass. I would surely like to know what it means, why soever would I want to cede control, and how I may silence such prompts.j

Hi Enpass team, Currently there is the Magellan Vulnerability on SQLLite. Enpass use SQLCipher engine and SQLCipher use old version of SQLLite (under 3.26). So I wonder if encrypted data of Enpass is still safe with this Magellan Vulnerability? Thanks, Binh

Hello, Has this any consequences to the security? Do you have to build in any backdoors?

Autolock always worked fine in version 5 desktop, but it's not locking in version 6. The only option that I always have unticked is Settings > Security > Autolock When: "Main Windows Is Closed". Those settings worked fine in version 5, but not in version 6.

Been Enpass user for many years ..... and all upgrades have been reasonably straight forward. Yesterday Android phone icon on home page disappeared .... put it back and it run and advised it needed to upgrade to ver 6 - asked for master password - and rejected it twice. To avoid lock out - quit App. Restarted and this time on 2nd attempt it did work .. downloaded, then advised synch had to be reset up again and required DropBox username & password. Woah !!! never has this before ..... fails password 4 times, then wants new access details for my Dropbox ..... all sounding a bit suspicious - so stopped upgarde. Has Enpass been breached - or…

I have read that the Enpass database is stored in /home/documents but that is not true. I have installed version 6 in Ubuntu 18.04, and have 4 logins stored in Enpass, but my documents folder is empty. So please tell me where to find it.

Is it possible to disable Most Frequent in v6? In v5 I could do it, but I cannot see how to do it in v6. It's a BIG security risk, in my opinion.

Why is EnpassPortable permanently trying to reach sites like Amazon or Google on Port 443?

I upgraded to the latest version 6.04. I used to be able to login with my Master PW and my PW's were accessible to me. Now I get a message that there is no data and that I need to restore from a backup. It won't allow my DropBox backup (bad PW again) to be accessed and the same for restoring from a local backup. Weird thing - I can log in ok from my Android phone using a finger swipe with no issues. Anyone else having this issue?

I ran across an interesting article about some other well-known password managers out there, like 1Password, KeePass, DashLane & LastPass. https://www.securityevaluators.com/casestudies/password-manager-hacking/ If that's too technical, read ZDNet's summary on this article: https://www.zdnet.com/article/critical-vulnerabilities-uncovered-in-popular-password-managers/ While I was pleased Enpass wasn't on the list, I suspect it might be due to lack of significant market share like some of the other products. But I'm also very curious about the steps Enpass is taking to have independent third-parties pen-test the product. EDIT: I should have lo…

Hey Guys, First of all kudos to you guys to develop such an awesome piece of software. I have just migrated my stuff to Enpass on my Mac l and loving it so far. This is definitely one of the best offline password managers I have seen by far. While playing around with the software, I have noticed it automatically creates a backup file with an extension .enpassbackup. Like most of the other software, this file is what a hacker would need to brute force an attack on to decrypt all the secrets. How is this file generated, how secure is this file? Can we have some extra security measures to protect the file other than the master password? Cheers

Hi. I am currently transitioning from keeping passwords synced with my google account to storing them on enpass. I want to change my master password from all my devices but I am not understanding what this actually means... "Warning: This will not change the password of the Enpass Auto Backup files and previous Manual Backup files saved by you in your device or cloud." So if anyone knows what is to be done before I change the password, please do let me know. I am just doing this as a precautionary measure since I don't want to get locked out of my devices and accounts. Thanks.

Hi there, I'm trying to sync with my google drive and it says your master password not match resolve now. when I enter my master password it says not match. does that means some one else changed my master password and All my passwords in my account has exposed? please response ASAP, I have to change all my passwords if anything has exposed! thank you :)

Hello, I want to buy Enpass Premium, to be able to have multiple faults. My Question is, is it possible, not to store the password of the secondary vault in the primary vault? I don't need any auto unlock features. Entering the password every time, is perfectly fine. This page indicates this is default: "When you create multiple vaults, the passwords of other vaults are stored securely in the Primary vault and are removed when you delete the vault. That’s why when you unlock Enpass, all the vaults get unlocked automatically." - https://www.enpass.io/docs/manual-desktop/vault.html#vaults-in-enpass Can this be changed? I need different faults for …

Hello, I am relatively new to Enpass, I noticed, that after reboot, I can use the PIN to access my fault. How can this be secure? This means that the Masterpassword is stored locally on the flash memory. This and the fact, that there have never been an security audit for iOS really worries me. Can someone explain to me, how this might possibly secure? I have a feeling, that the reason, why there is no security audit is, that they know, that there is no way there application passes the audit.

Hi, at the moment our company is thinking about using Enpass. We have some questions for that, i cant find a answer for these questions in the forum. -for example: we have a server, where is one file lying. Somebody change the database password. Does all other user get the password automatically? -Did we need a php server or does it work without? -Did we need a own domain? -Is a multiuser system available? I'm looking forward for some answers. Thank you very much. Best regards.

I sent a message to support with this question as I could not find an answer here in the forums, but thought this might be helpful to others once I find a solution... I have significant data that was imported into Enpass, credit cards for example - when I create a new Credit Card item all of the default fields are different from my old credit card items and the "Number" field which has field type "Card Number" will automatically hide the first 12 characters as asterisk in the search results and only show the last 4 digits, however if I modify an old imported Credit Card and change the Number field to be of type "Card Number" the full 16 digit card number still shows …

I have a backup file on a network drive that I need to restore to a local desktop with Enpass 6.0.6. The instructions say "Tap on Local Storage" Where is Local Storage to tap on???

Hi I have just started using Enpass and it looks great so far. I have concerns about the security of my WebDAV credentials. These do not look like they are stored in the vault so presumably are stored somewhere locally. What level of encryption is applied to these? Are they secured by my master password? If my device is lost and they are able to extract my WebDAV credentials then they will have access to far more data than just my (encrypted) vault. So I need to be assured that these credentials are stored in a way that is not reversible except with my master password. This question is for both Windows and iOS. Thanks David

How do I enabled the SYNC via WEBDAV to occur only when connected to my home wifi network. Based on the user manual, the app on my phone will attempt to connect to the URL for my webdav server to perform a sync each time I unlock the vault, the issue is that the IP address I am using could theoretically exist when I am connected to another network, and thus will attempt to connect - while passing across the name and password for my webdav server. If there was an open WEBDAV server at that address, and it were to allow the connection (even if name/password are incorrect), then the ENPASS app will sync across my vault to the webdav server. While the 'SSL Cert…