Data Security

Hi I have just started using Enpass and it looks great so far. I have concerns about the security of my WebDAV credentials. These do not look like they are stored in the vault so presumably are stored somewhere locally. What level of encryption is applied to these? Are they secured by my master password? If my device is lost and they are able to extract my WebDAV credentials then they will have access to far more data than just my (encrypted) vault. So I need to be assured that these credentials are stored in a way that is not reversible except with my master password. This question is for both Windows and iOS. Thanks David

Hello, not sure if this is the correct forum to address this. Please move it if I chose wrong. Im getting a sync error on my corporate network because our firewall is not allowing enpass to get through. I try to sync with onedrive and i get redirected to onedrive, login and it makes the connection, but still get a sync error. This works as it should when im outside our corporate network so I suspect our firefall settings. I have asked our IT department to do an exempt for Enpass in the proxy but i need to know what url/port we need to whitelist. Anyone who can help me with this? Thanks!

A (german) article[1] about security/privacy protection of Enpass notes that that after Enpass sends some metadata after entering the master password: GET /enpass/alert/?package=io.enpass.app&os=9&version=6.1.0.227&version_code=227&language=de%7Cde HTTP/1.1 Host: rest.enpass.io I suggest to make this optional and being able to deactivate this i the settings. [1] https://www.kuketz-blog.de/enpass-proprietaerer-passwortmanager-mit-optionaler-cloud-anbindung/

Hi, at the moment our company is thinking about using Enpass. We have some questions for that, i cant find a answer for these questions in the forum. -for example: we have a server, where is one file lying. Somebody change the database password. Does all other user get the password automatically? -Did we need a php server or does it work without? -Did we need a own domain? -Is a multiuser system available? I'm looking forward for some answers. Thank you very much. Best regards.

Hello, I sync this file vault.enpassdbsync on my PC and Anroid using Dropbox. When I try to open this file .enpassdbsync on Android, a message appears that the master password is incorrect. If I backup on a PC and select .enpassbackup on the phone, then everything works fine. Do I understand correctly that I cannot recover passwords from a file .enpassdbsync? Why is this file needed?

Hello, i use enpass on my mobil via app. Is it possible to print an overview of all my passwords? best regards Matthias

How do I remove all data and any evidence of Enpass on a MAC (that I will no longer own) but ensure it stays with me on other devices? (I use it in iCloud to sync my use of Enpass on different devices).

I have some excel password protected workbooks. How do I get enpass to be able to open them?

I ran across an interesting article about some other well-known password managers out there, like 1Password, KeePass, DashLane & LastPass. https://www.securityevaluators.com/casestudies/password-manager-hacking/ If that's too technical, read ZDNet's summary on this article: https://www.zdnet.com/article/critical-vulnerabilities-uncovered-in-popular-password-managers/ While I was pleased Enpass wasn't on the list, I suspect it might be due to lack of significant market share like some of the other products. But I'm also very curious about the steps Enpass is taking to have independent third-parties pen-test the product. EDIT: I should have lo…

Hello, I want to buy Enpass Premium, to be able to have multiple faults. My Question is, is it possible, not to store the password of the secondary vault in the primary vault? I don't need any auto unlock features. Entering the password every time, is perfectly fine. This page indicates this is default: "When you create multiple vaults, the passwords of other vaults are stored securely in the Primary vault and are removed when you delete the vault. That’s why when you unlock Enpass, all the vaults get unlocked automatically." - https://www.enpass.io/docs/manual-desktop/vault.html#vaults-in-enpass Can this be changed? I need different faults for …

I sent a message to support with this question as I could not find an answer here in the forums, but thought this might be helpful to others once I find a solution... I have significant data that was imported into Enpass, credit cards for example - when I create a new Credit Card item all of the default fields are different from my old credit card items and the "Number" field which has field type "Card Number" will automatically hide the first 12 characters as asterisk in the search results and only show the last 4 digits, however if I modify an old imported Credit Card and change the Number field to be of type "Card Number" the full 16 digit card number still shows …

Hi there, I'm trying to sync with my google drive and it says your master password not match resolve now. when I enter my master password it says not match. does that means some one else changed my master password and All my passwords in my account has exposed? please response ASAP, I have to change all my passwords if anything has exposed! thank you :)

Hi. I am currently transitioning from keeping passwords synced with my google account to storing them on enpass. I want to change my master password from all my devices but I am not understanding what this actually means... "Warning: This will not change the password of the Enpass Auto Backup files and previous Manual Backup files saved by you in your device or cloud." So if anyone knows what is to be done before I change the password, please do let me know. I am just doing this as a precautionary measure since I don't want to get locked out of my devices and accounts. Thanks.

I upgraded to the latest version 6.04. I used to be able to login with my Master PW and my PW's were accessible to me. Now I get a message that there is no data and that I need to restore from a backup. It won't allow my DropBox backup (bad PW again) to be accessed and the same for restoring from a local backup. Weird thing - I can log in ok from my Android phone using a finger swipe with no issues. Anyone else having this issue?

I have read that the Enpass database is stored in /home/documents but that is not true. I have installed version 6 in Ubuntu 18.04, and have 4 logins stored in Enpass, but my documents folder is empty. So please tell me where to find it.

This morning I got a prompt stating that Enpass wants to “control my computer through accessibility”. The prompt led off to the Privacy section of System Preferences (which I have locked, and in which, therefore, Enpass is grayed out). I have NOT enabled computer control through accessibility for Enpass. I would surely like to know what it means, why soever would I want to cede control, and how I may silence such prompts.j

Hi, I have been a user of Enpass since the Windows Phone days. Purchased a licence back then and used to sync to my OneDrive. After being forced to move to Android, I again purchased an Android licence to have my passwords synced between my PC and my Android device. I recently noticed while setting the app up on a new phone that the permissions requested to access OneDrive seem to have increased since the last time I went though the exercise. Enpass needs your permission to: 1. Sign in automatically Signing in with your Microsoft account will automatically sign you in to this app. …

Why is EnpassPortable permanently trying to reach sites like Amazon or Google on Port 443?

Is it possible to disable Most Frequent in v6? In v5 I could do it, but I cannot see how to do it in v6. It's a BIG security risk, in my opinion.

Autolock always worked fine in version 5 desktop, but it's not locking in version 6. The only option that I always have unticked is Settings > Security > Autolock When: "Main Windows Is Closed". Those settings worked fine in version 5, but not in version 6.

Been Enpass user for many years ..... and all upgrades have been reasonably straight forward. Yesterday Android phone icon on home page disappeared .... put it back and it run and advised it needed to upgrade to ver 6 - asked for master password - and rejected it twice. To avoid lock out - quit App. Restarted and this time on 2nd attempt it did work .. downloaded, then advised synch had to be reset up again and required DropBox username & password. Woah !!! never has this before ..... fails password 4 times, then wants new access details for my Dropbox ..... all sounding a bit suspicious - so stopped upgarde. Has Enpass been breached - or…

Hello, Has this any consequences to the security? Do you have to build in any backdoors?

Hi Enpass team, Currently there is the Magellan Vulnerability on SQLLite. Enpass use SQLCipher engine and SQLCipher use old version of SQLLite (under 3.26). So I wonder if encrypted data of Enpass is still safe with this Magellan Vulnerability? Thanks, Binh

Hi, Am new with enpass and try to understand it bit better. what if: > I'm in a foreign country, i loose everything, laptop, phone etc... 1. So far connect to my email account (I remember the password) then I can get all the information I saved their. I can actually connect to all my account (fb, etc..) 2. If am using Enpass, what can I do? I will log on a public computer but then I can't access to anything? What did I missed? Thanks for you answer.

I can no longer login to enpass using my iPhone Touch. Is this not an Enpass issue or should I contact Apple?