Data Security

How do I enabled the SYNC via WEBDAV to occur only when connected to my home wifi network. Based on the user manual, the app on my phone will attempt to connect to the URL for my webdav server to perform a sync each time I unlock the vault, the issue is that the IP address I am using could theoretically exist when I am connected to another network, and thus will attempt to connect - while passing across the name and password for my webdav server. If there was an open WEBDAV server at that address, and it were to allow the connection (even if name/password are incorrect), then the ENPASS app will sync across my vault to the webdav server. While the 'SSL Cert…

Can someone download say a Facebook or Reddit login, host it and have enpass see it and send over the credentials?

How do I remove all data and any evidence of Enpass on a MAC (that I will no longer own) but ensure it stays with me on other devices? (I use it in iCloud to sync my use of Enpass on different devices).

Hello, is it possible to describe the format how enpass generates the share link/file (enpasscard://share?data=XY&tag=XY, *.enpasscard) ? I have a tools that generates wordpress instances and then in want to import the login for a generated instance without manually copy and paste user password and url, the best way i found is using the share link. Unfortunatly i dont know how i can generate this link by myself with a custom PSK without using enpass. (The data is base64 encoded and probably aes256-cbc encrypted but where is iv stored or is salt used) thanks

Hello dear Community, Now I want to hear from you, where you save your Passwordfiles on the Computer? I had a pretty obvious file, where you could assume that it would be there. Which is pretty dumb obviously. Still I'm not sure which way would be smarter. Put in an any "random" file where no one would suspect it? Oder put in a file with countless other files inside? Do you get what I mean? I'm sorry, if my english is bad .. Best Regards

hello, I use KeePass at work, and from today I can't open my KeePass DB, "error Failed to load the specified file! The composite key is invalid!" Is there chance enpass db might become corrupted the same way?

Hi I have recently read an article written by Tavis Ormandy, Link. So I'm curious to know that Enpass have these vulnerabilities or not?. Thanks

Hello there I'd like to share something very scary that happened to me a few days ago. I searched for Enpass on the Google Play Store and downloaded the app without checking it thoroughly. The app installed, and looked like Enpass, the only difference was the icon: instead of the usual keyhole in a blue circle, it looked like a pile of sheets with a keyhole in the middle. I launched it and it asked me whether I wanted to type in new data or restore previous data from the cloud. I chose to restore the data from Dropbox (I'm already using Enpass on other devices) and the app tried to connect with no success. It said it was impossible to connect and to try later. …

I have been very happy with enpass so far and believe it to be an amazing solution for password management. I read an article today about other systems and wanted to know if this system can be compomised in the same manner and what is done to ensure security. https://www.theregister.co.uk/2017/02/28/flaws_in_password_management_apps/ Thanks!

In this thread regarding the need for a password re-entry after reboot instead of allowing biometrics (which I agree 100%), one of the posters mentioned the need for greater security when passing through the borders. In my search for a solution, I came across 1passord's travel mode. I am not now, nor have I ever been a 1password user so I don't know anything about the company. https://blog.1password.com/introducing-travel-mode-protect-your-data-when-crossing-borders/ I realize that Enpass doesn't have a "travel mode" -- but I remember reading about how to remove your enpass vault before you pass through borders/immigration and then re-sync i…

I read the above thread and associated FAQ. But I haven't changed my password! So, I wonder what is going on. How could I get this message (see screen shot)? Certainly, I hope someone else has not fiddled with my signins, which I doubt, but still.) I use a Windows 10 laptop and a Windows 10 phone, both synced to OneDrive. So, how'd this happen? How do I fix it (same as above Oct 2, 2017 thread)? Oh, I love Enpass!!!

Hello, i use enpass on my mobil via app. Is it possible to print an overview of all my passwords? best regards Matthias

Hi All, I have enpass installed on my work computer and it is detecting a program called EnpassBridge.exe that is been classed as Malware with a 73/100 threat score. Can you any shed any light on this?

Hi all, I have not found an answer while searching so please forgive me if it is already answered, but I would be interested in knowing which cipher (and library) is used by enpass to encrypt data? Thanks a lot in advance and thanks a lot for that great product. Thomas

Hi, I think that it would be important for us, customer, to understand what's your business model. As a security app, we should be able to know how would you work? So How can you make money on your app? Do you work like keepass, you have other jobs and do that as a side job (which is absolutely not a problem if there is not conflict of interest)? If you were a european company, 9 euros for only buy once the mobile app would be really not enough to survive for that big of a team. How can we trust a company that we don't know how do they make money? Especially with the problems with facebook etc. Any attempt to levitate this subject won't be very good for y…

I have posted the post twice，please delete this post thank u

Hi there I´m using PIN code on Mac OS (MacBook without Touch ID) in oder to quick unlock enpass app running in the background? I think that the master password is not saved on in Mac, even in ram. This means unlocking with Pin Code doesn´t actually decrypt data in enpass. Technically you can say enpass running in the background and locked with Pin is actually unlocked, right? In case someone gets acess to an unlocked Mac with enpass locked with PIN (instead master passwors): May it be possible that this person (that is is pretty much into IT / has former computer skills) could gain access to data saved in enpass?

I've 10 days left on my premium Dashlane licence. I'm starting the evaluation of Enpass and might switch usong the actual premium price promotion https://www.enpass.io/pricing/ I've installed Enpass on my iPhone and Mac Book Pro. The migration of some 250 registration from my Dashmane ti enpass went allright in a few seconds. The sync is working with vault installed on Dropbox. Since my trust in the Cloud storage is limited, I prefer to have my vault stored on my own Synology NAS storage organization. I've not seen this possiility in the sync option. Is it possible ? My second question : is it possible to open a website double cliking on an Enpass reg…

Hello, Has this any consequences to the security? Do you have to build in any backdoors?

Hi there, i start using Enpass and its great, but found some shortcoming here and there, so willing to give feedback. 1. Copied data through browser extension ( chrome extension) does not auto clear as it works inside Enpass main desktop application. 2. While generating a new password, there is one option only i.e. "Fill and copy" and as is said in my first point, data don't get auto cleared, so its a problem, as you know clipboard is not a safe place for sensitive data. I don't prefer copy-paste data when we are dealing with sensitive data. Instead of this, there should be a "Fill only" option to inject password directly without using clipboard and this will b…

Been Enpass user for many years ..... and all upgrades have been reasonably straight forward. Yesterday Android phone icon on home page disappeared .... put it back and it run and advised it needed to upgrade to ver 6 - asked for master password - and rejected it twice. To avoid lock out - quit App. Restarted and this time on 2nd attempt it did work .. downloaded, then advised synch had to be reset up again and required DropBox username & password. Woah !!! never has this before ..... fails password 4 times, then wants new access details for my Dropbox ..... all sounding a bit suspicious - so stopped upgarde. Has Enpass been breached - or…

Heya, I’m in the situation with Enpass Vaults across three devices (iPhone, OSX, Windows)I regularly used. For whatever reason, they’re not properly synced. I’d like to consolidate them without loosing anything from any Vault. I learned the hard way (using other password managers), that trusting Import buttons and hoping for the best is a bad idea. Your documentation didn't help me to take action yet. How do I proceed safely without compromising anything? Given I don't know which entries are most recent on which device. Thank you in advance! Ronny

This morning I got a prompt stating that Enpass wants to “control my computer through accessibility”. The prompt led off to the Privacy section of System Preferences (which I have locked, and in which, therefore, Enpass is grayed out). I have NOT enabled computer control through accessibility for Enpass. I would surely like to know what it means, why soever would I want to cede control, and how I may silence such prompts.j

Several password manager are broken. I found this: https://team-sik.org/trent_portfolio/password-manager-apps/

Hi Enpass team, Currently there is the Magellan Vulnerability on SQLLite. Enpass use SQLCipher engine and SQLCipher use old version of SQLLite (under 3.26). So I wonder if encrypted data of Enpass is still safe with this Magellan Vulnerability? Thanks, Binh