Leaderboard

Hello, I was using KeePass and now I am switching to Enpass. I also tested 1Password and here I saw a feature that is really cool: when an entry has a weak password, then 1Password displays a huge red message box: For Enpass I also want to see such message boxes (the list is not complete, so maybe you find more reasons for such message boxes): Weak password (show a red message box) Identical password (show a red message box) Breached password (show a red message box) Password expired (show a gray message box) 2FA not set up but available (show a yellow message box), see also If there are multiple issues (like a weak and expired password) then you should show multiple message boxes. Such message boxes indicate the actual status of an item and help to increase the security of the password items. Best regards OLLI

Hello, sorry if I post again, but there was an other database found with 127 million accounts affected: https://www.heise.de/security/meldung/Datenverkauf-im-Darknet-Nachschlag-mit-127-Millionen-weiteren-Accounts-4310778.html Here the English article they link to: https://techcrunch.com/2019/02/14/hacker-strikes-again/ Here the following websites are affected: Houzz (57 million accounts affected) YouNow (40 million accounts affected) Ixigo (18 million accounts affected) Stronghold Kingdoms (5 million accounts affected) Roll20 (4 million accounts affected) Ge.tt (1.8 million accounts affected) PetFlow (1 million accounts affected) Coinmama (450.000 accounts) Best regards OLLI

Hi @Dentonthebear, Sorry for late reply. We have no restriction on size when you choose custom icon. We resize an provided image to 200x200 pixels, after resizing if its size is less than 100KB, it is used as custom icon otherwise not. So, a Custom icon with 200X200 pixel and less than 100KB will always be accepted. Also, favicon support is coming soon and it will save your time from adding custom icon for every website. Thanks.

Hello, today I read in the c't magazine that a new database with 620 million accounts was found: https://www.heise.de/security/meldung/Gehackte-Websites-620-Millionen-Accounts-zum-Verkauf-im-Darknet-4305517.html They link also to an English article in The Register: https://www.theregister.co.uk/2019/02/11/620_million_hacked_accounts_dark_web/ Here the following websites are affected: 8fit (20 million) 500px (15 million) Animoto (25 million) Armor Games (11 million) Artsy (1 million) BookMate (8 million) CoffeeMeetsBagel (6 million) DataCamp (700,000) Dubsmash (162 million) EyeEm (22 million) Fotolog (16 million) HauteLook (28 million) MyFitnessPal (151 million) MyHeritage (92 million) ShareThis (41 million) Whitepages (18 million) It would be very useful if Enpass would alert users that have an account at one of these servers and asks them to change the password. Only if the password change date is newer than the breach of the website, then the account is marked as safe. Best regards OLLI

Hello @Anshu kumar, I read in the German c't magazine that there were new password collections found in the web. They called them Collections #2 to Collections #5. Details see here: https://www.heise.de/security/meldung/Neue-Passwort-Leaks-Insgesamt-2-2-Milliarden-Accounts-betroffen-4287538.html In the article they write that 2.2 billion accounts are affected. So it is very important that Enpass helps us to find out if we are affected. You should check like the HaveIBeenPwnd plugin for KeePass the following ways: Site/Domain based Username based Password based Best regards OLLI

Sorry, but Enpass Beta 6.06 still crashes when importing my SafeInCloud XML file.