Leaderboard

Hi @Magnus_Carlsen, Thank you for reaching out to us. The correct or rather the more accurate question would be, does Enpass intend to create such a backdoor to steal customer passwords in the future. The answer would be a straightforward no. As a business, Enpass has larger goals that would benefit from securing customer data ( since we are a security company), and not from stealing it. We have complete control over the queries originated from Enpass to servers and what it entails. Furthermore, we have abundant users who happen to be experts in security domain who are more than capable of identifying any such misadventure just by looking at the URL connections created by Enpass and what it contains. Lastly, we get regular 3rd party audits, whose reports are available on our website. Please check out the link here. Thanks!

With $30 you already have the license for all platforms. 10 for iOS, 10 for Android and 10 for Windows. Since they are lifetime and not restricted to the amount of devices (afaik), what more do you want?

OK, I've finally figured it out. I've disabled the following options for Safari and sync is working! Content Blocker Block Pop-ups Thank you for your support.

Hi, I have been using Enpass for a couple mounth now, after buying the Premium version which is very good. However, I am a bit of a design nerd, and I was quite sad to see that the icon system was not so good, and it seems that I am not the only one: Only a few icons are available by default. Some icons are quite outdated (see the Netflix one). Adding custom icons is long and buggy (the icons size is very messy). We cannot remove custom icons (after trying to add the same icon in various sizes, I got it in almost ten version and found no option to remove them). That is why I have been thinking about the following features, that I think could be good looking and more userfriendly: When new credentials are added, if the field URL is filled, try to catch the favicon and use it as an icon. If the website does not have a favicon, or the URL is not given, just leave the icon empty as it does currently. Added a little "refresh" button when editing a credential, which tries to catch the latest favicon (if the icon was a favicon) For the custom icons, just resize them to the size of the icon displayer. Adding a little cross on our custom icons (so that we can remove them easily) This requires that custom icons ALWAYS have the priority over favicons. I think this is not a huge feature, but it is the kind of details that improves the user experience, even a little (and that design nerdy, like me, will enjoy A LOT). Thanks for reading this!

Ohh, yeah correct. Am I complete idiot or what? I didn't have any browser on my phone whatsoever. Thank you so much! ====== Update: You can mark this issue solved, if that's the thing we do here. Thank you so much once again!

Hi @dhaval We are sorry for the inconvenience caused to you. I would suggest you to please make Chrome as your default browser in case if you are using any other and then try to sync. Hope this helps!

Hi @Dentonthebear Thanks for your input. We are already working to improve our user manual if you have more suggestion please do let me know. Thanks

Hi @Pratyush Sharma, the Error is since today gone (absolut no idea why, no change in Nextcloud or Enpass). I will check out the next few days and give you feedback. thx

Thank you! I also just started migraring to Enpass, and was just in the process of writing the same post. To use Enpass tags, we really need an Untagged filter to ensure there is a posibility to organize the passwords, and makes cleanup easier when "groups" of passwords needs to be removed. Also i would really like a generate password option when you add new sites in the Enpass assistant.

Hi @jakejohn Please follow the steps to delete PSK: Open Enpass ---> Goto Setting ---> Advanced ---> Sharing ---> Tap on Pre-Shared keys ---> Select the PSK (which you want to delete) and right click on it.

Hello, I am a 1Password stand-alone version user and this is the first time I am tasting Enpass. They seem very similar but unfortunately I am also a Vivaldi and Brave browsers user and I notice that Enpass is not compatible with them. Is there any way to make them working together ? I only can switch to Enpass when you have Vivaldi/Brave compatibility. Do you expect to offer compatibility with this browsers soon ? Thanks

It's time to talk about features Enpass is still missing and bugs that have yet to be fixed, 6+ months after they were reported or promised. Favicons — Enpass can’t be a major player in the password management market, and can't be truly user-friendly, until it fetches the logos of sites and services on its own. Even bare-bones password managers like Bitwarden have this knocked. What's the delay? I spend exponentially more time putting icons on my Items than I do entering the account details. It's bad enough that Enpass doesn't fetch icons, but it's far, far worse that if you add your own, they have to be exactly 200x200 to display correctly but Enpass doesn't bother telling users this is the case! At the very, very, very, very least, it is incumbent upon the Enpass team to tell users this limitation. But frankly, I don't understand what's preventing the app from fetching favicons/logos when literally all its competitors do this. Browser Extension (Enpass Assistant) pop-up doesn't stay inside the browser window — The Enpass Assistant is not just the only password app with this bug, it's literally the only browser extension of any kind with this bug. Browser extension overlays should render inside the borders of the browser window. (See attached screenshots) Enpass Assistant browser extension pop-up doesn't close from hitting ESC — The Menu Bar pop-up does, so this is probably just an oversight, but it should have been fixed long ago. Again, every other browser extension of any kind that has a pop-up, that pop-up can be closed by hitting ESC. It's standard. Allow users to set their own default template, and have that default be the one that gets used for "Ask to Save New Logins" in the browser — There's not much point in letting users create their own templates if they can't also set those templates as a default, and have that default used when saving new logins from your browser. I've made my own template, but there are so many steps involved in using it, that I've had to create my own system (I have the template as an empty Item, which I duplicate when I'm creating a new one, because that's a 1-step process, instead of the 3-4-step process of digging up my template when hitting "New"). But much worse is the fact that it's impossible to make your own template the default when Enpass offers to save an Item in your browser. I've been forced to turn off that feature because the Items created that way aren't in my chosen template. Auto-fill when adding a tag — This is standard behavior for all software, and it's common sense — why isn’t being done? Why do I have to type then entire word every time I add a tag? Worse, it's impossible to scroll the sidebar when entering a new item (because Edit happen in an overlay instead of a child window), so you can't even see all your current tags to make sure you're typing the right name. If I can't remember if my tag is called "Shop" or "Shopping," I just have to guess, and if I'm wrong, I've created a new tag by accident, then I have to go back and fix it. Not offering to auto-fill on tags (when I type "Sho," Enpass should start filling in "Shopping") makes Enpass feel like 1990s software. Sharing vaults as read-only — Enpass can never be a family password manager until parents can have read-write privileges and restrict their kids to read-only privileges. Having separate passwords for each vault (as an option) — Unlike the bullet points above, which should have been in place before Enpass ever came out of beta, I can be patient for this one. But it is important. The extra layer of protection is needed if Enpass is ever going to be a viable password manager for businesses. If workers can access their work credentials with the same (potentially awful) password as their personal credentials, that puts companies at risk. I will continue to use Enpass for the time being, but the fact that these issues still haven't been addressed, even though they were almost all brought up over a year ago, has me always trying out alternatives because I get the impression — from inaction despite multiple reminders — that the Enpass team isn't interested in fixing these problems.

Hi @MrAlex Sorry for the trouble you are going through. Please follow the troubleshooting steps mentioned in this FAQ. Hope this helps!

My Phone is up2date, all Apps are up2date and I don't use any Beta atm.

Hi, I had an issue on one client's iPhone where I need to make sure all the OS updates were installed before I could upgrade and get the paid version working.

I'm not so sure it was Chrome, but when I first downloaded the Windows version, I was adding logins manually with my normal password. Then I would go to the web site log in with my stored credentials. I would then change my password and then instruct Enpass to store the updated information. But it did only on about half the passwords. I posted the issue in the desktop forum (no one responded), but decided to start over and wiped out my vault. The 2nd time, I just went to a web site, logged in and Enpass offered to save my credentials. That worked much better. Good to know about Enpass vs others as I was having buyer's remorse. For the most part it seems to be working okay, though.

Hi @Dentonthebear, Thanks for writing in. I would like to share that the current version of Enpass for mobile, autofills only Username/Email/ Password fields, while all other fields would remain empty. However, we do have plans to improve autofill functionality and will be available with the subsequent update. Thanks for your co-operation.

@Vikram Dabas? @Ankur Gupta? The unresponsiveness and lack of progress on these issues is making me start to regret putting my password eggs in the Enpass basket.

Good respone @Hemant Kumar, but I think another thing is the sellingpoint of Enpass. While some other password manager have their sourcecode opened, they offer subscriptions, onlinestorage and/or sync of the vaults. Enpass moto is "No subscription" and "...nothing is stored on our servers". What enpass has is a good piece of software especially considering the cross-plattform UXP with clients for a broad range of operating systems. While it still lacks autotype, it's still unbeatable at being everywhere; from Linux desktop all the way to my wrist. Opening up the code completely would lead to numeruos forks on Github in no time, and the golden egg wouldn't..well there would be more eggs.. And, sure the third fork could have a oneliner backdoor implemented, but that applies to all software on github. IMHO it's fully understandable if Enpass having 25 employees with paychecks working hard on numeruos platforms wants to keep an ace in their sleeve, it's just happens to be one of the _worst_ software categories to keep behind closed bars nowadays :-) While I was one of those asking for an audit, which you did (kudos again), perhaps you could still conscider opening parts up in a distant future. For instance, in version 6, core and UI is written separately, perhaps you could open up the core code, leaving GUI propriertary? Or, open up core+UI but leverage some extra parts only through licensed stores which you're already doing (Pro). E.g Enpass could be available FOSS on Github, but the cloudsync would only be available on your site, (still free for desktops)

Any chance of coding in a confirmation UI/UX GUI for users (like my good self) that have accidental deleted a Field / Section / File. I have the unfortunate experience of hitting the "Delete" button by accident while in edit mode of a Field for example. This has happened to me after making a large number of edits in a ITEM at which point I have had to make a decision not to undo edits and continue to "Save" the item, losing that particular piece of important data. Also where does that deleted information go, it's not in trash bin to recover? Maybe the addition of a "Confirmation of deletion of Field / Section / File" toggable option could be added into the Advanced Settings area or another option maybe have a time specific undo option. Anyway, hope some other user have shared this experience and feel that this may be a good option to vote for or +1.

Hi again I re-installed Enpass on the iPad and that resolved the issue. best regards Torbjrn

I uninstalled Opera and reinstalled - fixed it.

Thanks, rebooting did make it work again!

Hey guys, Thanks for sharing the details. Our QA team is looking into this issue. I will keep you update once I hear from them. Thanks for your co-operation.

Hello Anshu, Good news! Enpass v6.12 seems to have solved this issue. Thanks! Chris

Hi @scottjl, Thanks for writing in. I would like to share that Enpass already have the option to see the history of changes in every kind of fields in an item except Notes. For more details please have a look at our user manual. Cheers!

I understand that you do not wish to open-source your product, but I am reluctant to use it because of the fact it is closed-source, the company is based in India (yes, this matters) and there is no information about the development team. Have you considered having an independent 3rd-party audit your source-code on a regular basis as a way to gain credibility without open-sourcing your product? Thanks, Gili

+1

But there is absolutely NO NEED to put the (encrypted, yes) honeypot under their nose. Absolutely NONE. Without LOCAL sync possibilities Enpass is unfortunately NO SOLUTION for me. Which is very unfortunate, as it otherwise looks really good (feature-wise) and got many recommendations in various forums on the web out there. But local sync (via WLAN, and also via shared folders on a NAS, to sync between desktop computers) is a VERY BASIC MUST-HAVE for me. 1Password supports both (WLAN, shared folders), but is pushing me away with their subscription/cloud „politics“. This is your chance, guys! Take it! Make WLAN/folder sync happen!

Hi All, Sincere apologies for all trouble you are going through. Our dev team has identified the issue, and an update with the fixes has already been submitted to the Store. It's under quality check and will be rolled out soon. We appreciate your patience and co-operation. Also, recently we've released a beta update (.pkg) with the fixes. So if you want to give it a try, then you can install it from the here. Thanks.

@Vikram Dabas? @Ankur Gupta?

It would be a perfect application if we could create our own templates and import custom logos

Since you guys already have apps for Apple Watch and Android Wear, please support the Samsung Galaxy Watch community. Thank you

+1

+1 If you choose not to share the source, its sorta up to you to pay some third party to review the code with NDA. And as Gili said, no one expects reoccuring audits. Its mostly, or at least about customers needing to know that you've implemented cryptography in a acceptable way and of course that there are no additional ways in to a running process of Enpass.

Hemant, Thank you for your response. I don't think anyone is expecting frequent audits. Once a year or every 3 years should be enough. As to the cost... that's the cost of doing business. The primary reason I skipped over this product was because it was both close-sourced and unaudited. Otherwise, I would have purchased a copy. Gili

Hi @David Le Thanks for writing in. Sorry to say but currently we don't have any plans to support Samsung Galaxy Watch. Any watch with Google's Wear OS should work though. However, I have forwarded it the concerned desk for further consideration. Cheers!

Hi @Mark Thanks for posting your query on our Forums. From a consumer point of view, we do respect your concern about security. Yes. it's true. We also thought of getting a third party audit of Enpass but eventually had to drop this idea for some time (so far). All this because Enpass supports so many platforms with a high frequency of updates (all together) and it is not possible for us to get every update audited because every successive update will invalidate the last audit done. Also getting the source code audited is very hefty in terms of time and expense. I hope that helps answer your question.