Jump to content


Popular Content

Showing content with the highest reputation since 02/16/2018 in all areas

  1. 6 points
    I'm going to repeat myself but please support yubikey feature. IT's pretty simple, yubikco is giving all the API we need to do this: We know that it should be for web app but if you say was the ONLY usecase then -> we wouldn't use it to auth in windows 7 locally -> we wouldn't use it to auth in keepass locally -> we wouldn't use it to auth to QubesOS and decrypt the device LOCALLY Should I continue? Yubikey CAN and SHOULD be used to decrypt encrypted assets in ALLL password manager. We should never pretend to know better since there are always better version of ourselves and in this case it's also true. If theoreticians of security and cryptology use it then we should too. simple as that.
  2. 6 points
    Steam implements TOTP with a different alphabet. The basic algorithm seems to be the same as usual TOTP, but the representation of the token is different. An example implementation can be found here: https://gist.github.com/mooop12/1af7f0ffc8f28ea76f27abcba1e6da01 It would be cool if Enpass added support for these token types (maybe even as part of Enpass 6? :-) ) To not clutter the UI, maybe you could take the road of Bitwarden which uses a URL scheme to support different token types (no schema = default TOTP token, special token however could be steam://xyz123abc456).
  3. 5 points
    I understand that you do not wish to open-source your product, but I am reluctant to use it because of the fact it is closed-source, the company is based in India (yes, this matters) and there is no information about the development team. Have you considered having an independent 3rd-party audit your source-code on a regular basis as a way to gain credibility without open-sourcing your product? Thanks, Gili
  4. 5 points
    Hello, I upgraded to 6.0 today and was really looking forward to the vault feature in the hope that one vault would be shared while the other would not. My setup consists of 3 windows devices and 2 android devices (each with their own PRO licence). I managed to generate the new vault but when I come to tell it to sync to the same google drive location I get an error telling me that this is not possible. In my opinion the name of the first vault was system generated while 2nd vault onward require a name. Can't this name be used to generate a unique file name? Thanks and Regards,
  5. 5 points
    Hi there, I am happy user of Enpass and I have - like many others - recommended it to many of my friends. However I am completely unhappy with: 1- Pro version for Desktop - your main motto is: "desktop version for free" - it is NOT ANYMORE as you have removed few free-till-now features and included them ONLY in Pro version 2- main reason I bought Enpass is its capability of multi OS synchro - I bought iOS version and Android version. Together with MacOS version I am a complete user. The problem remains: I need to pay 3 times now (considering the point above). The answer from the developers that it is IMPOSSIBLE to merge buying from Google Play and Apple Store is just an EXCUSE - the versions on stores could be "light" or "free" while user could have activate Pro versions by using another credentials. All above is making me looking for the alternatives and for sure I will find one soon. Not me only but everybody who is unhappy for this greedy approach. Seeing on this forum (but not only here) how many people realised that version 6.0 brought completely new way of treating the customers it is only a matter of time when someone will come with more user friendly versions. Again: I am not against payment. But I am against paying 3 times for the main feature of Enpass that is: multi OS synchro.
  6. 5 points
    Hi! I was using Enpass UWP for Windows 10 with full-time Windows Hello enabled, because my computer fulfills all necessary requirements (TPM 2.0, UEFI Secure Boot). So Enpass UWP successfully detected that the machine is secure enough to store the keys in hardware/TPM and use Windows Hello directly on the first launch even after a computer restart or when Enpass UWP was completely closed. Now with Enpass 6, it is only using the fallback solution of asking for the master password the first time after restart, and using Windows Hello only for subsequent unlocks. I think Enpass 6 is great and a big improvement in many things, but in this particular aspect it feels like kind of a stepback. So my question is: Will full-time Windows Hello be supported in Enpass 6 again like it was in Enpass UWP for computers which fulfill the necessary requirements for hardware/TPM-based security?
  7. 4 points
    As mentioned by other users this update is extremely disappointing and is pushing me to look for alternatives for Enpass. Charging for old features such as unlocking with Touch ID is a bad precedent and worries me that Enpass may convert to a subscription model in the future. The Mac version of the app looks unpolished and looks worse than the previous version. It doesn't look like a native Mac app and instead merely a secondhand thought to the Windows version. I beg you guys to improve on the areas mentioned and don't ignore your users. Upgrading to pro is not an issue for me. As a matter of fact, I was more than willing to purchase it and excited to buy new features, but I do not want to spend my money on a product I have no confidence in, and unfortunately, this update has caused me to lose a lot of it.
  8. 4 points
    I'm very disappointed with this update. Sync is broken, browser integration is broken. Everything was almost perfect in the previous version.
  9. 4 points
    It's sad to say but I think you released a poor beta of Enpass. When I follow all the topics in the forum and considering my own experiences, I am not sure If I should trust my Data to Enpass anymore. Let's see what is reported so far - Not working Sync - Not working Pro Upgrade - Not working Browser Extensions - Corrupted databases or missing passwords after upgrade - get charged for features that were free in Version 5 Considering all of this, I ask myself two things 1. Have you tested your Software and Plugins before the release or was it more important for you to get money from your existing users? How can I trust a company that releases a bad beta version an a final realease that handles personal and confidential data? 2. What will come next when now ask for money for old features? What kind of business is that? For new features, ok. I would be willing to pay on order to support you. But not this way. I really thing about to switch to another products now.
  10. 4 points
    Hello Enpassians! The first Enpass 6 beta for Linux has just arrived with the following awesome features: Multiple-Vaults: Now you can share data with you family, friends or team members by using multiple vaults. Each vault must be synced with separate cloud account (could be of same service provider) for syncing. Keyfile Support: You can now additionally use a Keyfile with the master password of your desired length i.e. with the use of Keyfile there is no restriction on minimum length of 10 characters on master password. Cloud Sync: An improved cloud synchronization mechanism with Google Drive, OneDrive, Dropbox, WebDAV and yes, the iCloud as well. Secure Sharing: Enpass now allows you to explicitly encrypt a shared item using your own Pre-Shared Key (PSK). You can define the PSKs in Enpass Advanced settings. New Browser Extensions: Don't forget to download and checkout our new browser extensions for Chrome and Firefox browser with an improved autofilling and form capturing to allow you to autofill in pages with more than two form fields and lot more. Custom Categories and Custom Templates: Manage your data the way you love by defining custom categories and templates. Custom Icons: Add your own icons to the items. Trash: Added support to Trash the items. Archive: You can now archive the items which are no longer in use, but you don't want to delete them forever. Also the archived items don't appear in search results. Get it Now Important Notes Supported Platforms: Beta versions are available only for systems with 64 bit architecture, and through the Debian and RPM repositories. Tested on CentOS 7, Fedora 24 and Ubuntu 14.04 or later (64-bit only). Separate app: Beta version of Enpass 6 will be installed as a separate app and will not replace the existing data of Enpass 5 on your device. So you can freely use the beta without worrying of any data mixup. Restoring database from Enpass 5: The only way to restore your existing data from Enpass 5 to 6 is through restoring your Backup file from Welcome Screen. In case you have already used Beta version of Enpass 6 on any other device and have synced it to cloud before, you can restore from there. Synchronization: Enpass 6 is based on a new architecture and will not sync with the existing data of Enpass 5 on cloud. So this way you can use your existing cloud accounts to test the sync in Enpass 6 without any mixup of existing data. Also, the Enpass 6 places the data on cloud into the designated App folder unlike it used to do in the root folder for Google Drive, and OneDrive. These changes will restrict you from restoring of existing data from cloud and you have to restore your data using a backup file. All beta versions are precursors of final products. They are intended for testing purposes only and should not be used any place where your data is important. Please backup your database before testing a beta release. The beta app may contain some features that are still in development and not fully functional. Waiting for your feedback. With Love to our Linux users!!❤️❤️
  11. 4 points
    Hey guys, Sorry for the trouble you are going through. Recently, Opera changed their signing certificate for the Mac which leads to the failure of code signature verification in Enpass and thus, returns Enpass connection error while using the Enpass extension in Opera browser. We are implementing the fix and a new update will be rolled out asap. Till then we request you to please bear and co-operate with us. Thank you.
  12. 4 points
    Hemant, Thank you for your response. I don't think anyone is expecting frequent audits. Once a year or every 3 years should be enough. As to the cost... that's the cost of doing business. The primary reason I skipped over this product was because it was both close-sourced and unaudited. Otherwise, I would have purchased a copy. Gili
  13. 3 points
    I've grown more and more frustrated and disappointed with the Enpass team's cherry-picking only questions they want to answer in the beta threads on these forums, and ignoring real concerns, usability issues and bugs. Now a production release has been announced, and there are a TON of problems that have gone ignored. A week ago I paid for the premium version of Enpass in good faith, on the assumption that the team would fix all these problems before releasing the app publicly, but instead they've released a buggy, incomplete product and have thus far largely ignored all of the following issues, and in some cases removed features instead of fixing them. - Beta 279 and the production release no longer have the favicon-fetching feature. The original version of this feature was passable. The updated version in build 250 was terrible, and after the problems with this feature were pointed out, the Enpass team stopped replying to questions about it, and removed the feature completely without bothering to explain. Other password managers don't have any problems with their favicon feature, so what's the hang-up here? - Not having the favicon feature might not be so bad if the Custom Icon feature wasn't even worse. Despite a lot of great feedback early in the beta process about bugs and missing functionality in this feature, the Enpass team has apparently ignored all these issued, since the production release doesn't address any of them, including the next three bullet points below. - The custom icon feature can't properly scale images at all. This was reported months ago, and it should be a pretty easy problem to fix. And yet, only images exactly 200x200 will display correctly as icons in Enpass. - No. 3 might not be so bad, except that Enpass doesn't bother to tell the user that Custom Icons must be 200x200. Why not at least do this, as I suggested on 2018-12-09? This would take literally 10 seconds of coding. - Worse yet, it's impossible to remove icons from the Custom Icons gallery. So after you've tried several icon sizes before discovering the 200x200 restriction, you're stuck with those failed icons forever. Why isn't there a right-click > Remove? - Full-window version of Enpass doesn't remember its position on screen (originally reported 2018-12-05) Park your Dock on the right edge of the screen instead of the bottom Launch main window Hold down OPT while clicking the green "full screen" button in the red-yellow-green buttons across the top of the window (this make the window take up the whole screen, except for the Menu Bar and Dock) Quit Enpass Relaunch Enpass RESULT: Window is the correct size but it's moved to the right by 30-40px, so it's centered on the screen, which means it's partially underneath the right-edge-anchored Dock (This did not happen in build 220.) - In Menu Bar UI (Enpass Assistant), mousing over sidebar icons (Home, Favorites, etc.) does not show what they do. Only clicking on them displays the description pop-over... - After opening the Menu Bar UI, the only way to close it is to click somewhere else on the screen or use the ESC key (reported in the very first beta forum) Standard UX for Menu Bar items is that you should be able to close them via clicking the Menu Bar icon again - CMD+E from Enpass Assistant no longer launches main-window Enpass (reported in the very first beta forum) You now have to click the "hamburger" menu in the lower left corner of the dropdown This was a feature in Enpass 5 that has been removed from Enpass 6 There is now no way to open the full Enpass window with a keyboard shortcut - The system-wide hotkey for Enpass Assistant is not adequately customizable (this was reported a couple months ago) The user should be able to chose the entire key combination, like every app that allow the creation of custom universal keyboard shortcuts. Plus, CMD+OPT+[key] is a very common combination within other apps, so it's very likely that forcing Enpass users to use CMD+OPT+[key] will cause a conflict in other apps. Example: In Photoshop (at least in an older version I have), CMD+OPT+E is used to merge layers, so I can't use the intuitive CMD+OPT+E (for Enpass) as my shortcut. - The universal keyboard shortcut opens the mini-window in the center of the screen It should open anchored to the Menu Bar icon, just like it does when you click the Menu Bar icon - When in the main window, if you CMD+H to hide, it closes the window instead of just hiding it (reported months ago) This means you have to go back to the Menu Bar, open the mini-window, re-select the Menu button, and choose Open Enpass again to get back to the main window. I'm glad CMD+W was fixed, but CMD+W and CMD+H are not meant to do the same thing. THIS IS A MAJOR BUG AND COUNTER TO HOW THE HIDE FEATURE WORKS FOR LITERALLY EVERY OTHER MAC APP - In the sidebar, if you hide Categories or Tags, when you reveal them again, the item counts are missing - It's possible to create your own Categories, but it's a HUGE hassle to use them because templates aren't universal Every time you create your own category, it's impossible to then create any items within because there are no templates for the category. Templates should be universal — or at least you should be able to start with the universal list of templates and rule OUT templates that don't belong in your new category. Plus, having to duplicate templates for a new category just creates clutter. - When creating a new item from your own custom template, the Add Title field should be blank, not already filled in with the name you gave the template I've created my own template called "(basic)" that I use for everything, but whenever I create a new item with that template, the Add Title field isn't blank. Instead it says "(basic)" and I have to click in that field and replace that text (FYI, Anshu kumar said on 2018-10-11 that this would be fixed in the next build) - Duplicate Item needs to be part of the contextual menu when you right-click on an item in the Items pane I know this can be found in the three-dots menu of the Item Details panel, but that's not as intuitive as right-clicking on the item you want to copy - Tag fields do not recognize and offer to auto-fill existing tags (reported in the first beta forum) The upshot here is that users have to perfectly memorize every tag they've ever created: If you've previously created a tag called "Shopping," then you're adding tags to an item and you type in just "Sho" Enpass should know and start to auto-fill "Shopping" THIS IS A MAJOR PROBLEM: If tags don't offer to up existing tags, you can easily end up with Shop and Shopping, Bills and Billing, Med and Medical, etc. - It's impossible to scroll the sidebar when in Edit Item mode When in the Edit Item screen, everything else is grayed out and cannot be scrolled This means if you need to see all your tags in the sidebar so you can type in the right ones for your new item, you have to remember to scroll down the sidebar before you start creating or editing an Item This goes hand-in-hand with the Tag fields not offering auto-fill, because if you can't scroll the sidebar to see the names of all your tag, and there's no auto-fill for this field, you have to have every one of your tags perfectly memorized in order to add them to any new Item - In Edit Mode, when scrolling through an Item that has a lot of data (i.e., there's a lot to scroll through), scrolling doesn't work properly unless you click and drag the scroll bar When two-finger scrolling on a trackpad, the panel "bounces" back to the top as your scroll. (See this screen recording — in the first half, I'm trying to two-finger scroll down (and failing), then I click and drag the scroll bar to actually get to the bottom, then I try to two-finger scroll back up (and fail that too). - When adding tags to an Item, hitting [Tab] creates a new Tag field (so you can add additional tags), but does not select that new field If you hit [Enter] between tags, a new tag field is created and selected, so you can just type your new tag But if you hit [Tab] between tags, a new field is created but not selected, so you then have to physically click that new field to type your next tag - "Add to Vault" in the right-click menu and Item menu should be available even when in All Vaults It's not that intuitive to have to remember to go to the individual vault where that items lives in order to take this action (although I do understand the logic and that this may not be an easy thing to change) - In the Vault Settings > Change Master Password field, it's not possible to move the cursor at all, either by clicking or by the arrow keys If you make a mistake in the password you're changing, the only way you can edit is by backspacing. UNACKNOWLEDGED FEATURE REQUESTS - Ability to choose your own Default template I have my own template I use for everything, the upshot of which is that it's impossible for me to use the Autosave feature in Enpass Assistant because it cannot use my template. So I'm stuck manually creating new entries for every site and service. - Ability to delete templates There are dozens of templates I will literally never use. They get in the way of quickly accessing my custom templates - When the browser extension offers to save login information on a new site, which template is used by default should be up to the user Enpass Assistant offering to save new logins is useless if the automatically-created item is in the wrong template QUESTIONS THAT WERE NEVER ANSWERED - We were told Enpass 6 was supposed to include the ability to choose the location in your cloud service where Enpass would store its walletx — but that does not appear to be the case. How do I do this? - And where is the backup stored by default? Vault Settings shows "Last Synchronized 4 minutes ago" but Google Drive > Enpass > sync_default.walletx is 4 months old. Another vault syncing to a different Google Drive account doesn't have an Enpass folder at all. AND OF COURSE... - We were told that UI would be made more Mac-like and more user-friendly, but it never was... Broadly, the design of the app is too much like mobile for a desktop UI. Example: navigating the settings is a hassle. There's too much nesting of sub-sections. If the settings opened in their own window (like Enpass 5), they could be much more quickly navigated. Also, there are parts of the UI from which its impossible to reach the settings directly. For example, if you're in the Add Item sidebar, CMD+[comma] does not bring up the settings. Having the "edit" icon (pencil) in the middle of the header is counter-intuitive. It should be on the "card" along with "favorite" and "more." Editing any given Item should take place in the same part of the screen as viewing the item. Having a separate Edit UI roll out from the right is problematic because it becomes impossible to interact at all with the rest of the app. (As mentioned above, while editing it's impossible to scroll the sidebar to see your tags) In the sidebar, if you mouseover the Categories header, you get a "..." that brings up an "Edit Categories," but if you mouseover the Tags header, you get a "+" that brings up an "Add tag" overlay. Instead Settings > Customize should include a Tags area where you can add, edit, hide, and delete tags — and the sidebar's Tags header should behave the same way as the Categories header. UI consistency.
  14. 3 points
    Hi @Vinod Kumar, Although what you described about sharing vaults with other people totally makes sense, the use case described first by @chribonn and confirmed by @Toby Osborne and @rgsiiiya is quite different! Specifically, it's about syncing several my own vaults using one my own cloud account. To make a dramatic comparison, imagine that you were allowed to have just one google docs document per google drive account. That would be outstandingly inconvenient. But this is exactly what Enpass 6 does! Sharing vaults and having multiple vaults are orthogonal features. I hope you will sort things out at some point. Thank you.
  15. 3 points
    I rarely ever comment on these kinds of forums re update problems, but the experience with this update was so piss-poor (and still is) that I decided to do so anyways. I'm not even going to get into the details, but updating to v.6 required me to reset my Windows 10 setup (rollback) ignore frequent "error 400" messages figure out why Enpass didn't connect to my OneDrive account (my backups aren't in any default location) search endlessly for answers in fragmented help/support files/forums (it was pure chance that I found the answers) check if this update was actually legit !!! (I seriously doubted that at some point and thought Enpass must have gotten hacked) ... Several hours later I've got the new version running and - (place drum roll here) - I find out I've got to pay for features I once had. I have yet to (re-)configure/(re-)install the Opera browser extension (what a pain in the neck) and I haven't even looked at the Android version yet. My take? Many, many people who are not somewhat computer-savvy are going to pull their hair out over this one and I suspect that many people will consult outside help to get the update to work. Now, if this were some random app, I wouldn't care, but for hours today, I thought I had - permanently - lost access to the most important information in my possession, bank account , credit card, payment services etc., PASSWORDS! I'm sorry, but what Enpass forced on its customers here (unsuspecting customers at that) is and was an absolute catastrophe! Never again. I'm out ... even if the functionality costs more elsewhere. I've lost all trust (in a few hours) Bye.
  16. 3 points
    Hello, I have been using enpass for a long time and paid for the full ios/android clients. Since upgrade to 6 I miss a portable version which I can use on me business notebook on which I do not have the rights to install software. I have all my passwords in enpass so a portable version ist mandatory for me, otherwise I can not access my passwords on my company notebook. Will there be a portable version soon ? If no portable version will be available, I have to say goodbye to enpass. Thank you
  17. 3 points
    Who thinks of such things? Making people pay for their old experience? Ransom is the absolute correct word here. I have recommended Enpass A LOT in the past. Almost as if I'm getting paid for recommendations. But it's business models like this that make me stop recommending and using software. I have ditched 1Password for their subscription and account-model. I am seriously thinking of doing the same with Enoass. This is not about the price. It's about principle! If I would get the absolute best experience overall, I MAY purchase the premium package. I don't know about the Windows-version of EP6, but on Mac I have a for worse experience than before. A lot of this has been pointed out by a lot of users during beta-phase. Some was "acknowledged", nothing of that has been changed. Most has been ignored.
  18. 3 points
    If you had trouble updating the Enpass version from 5.6 to 6.0, follow these steps. Download version 5.6, if you do not have the installer, in this link (Softpedia). Synchronize with your previous backup in Dropbox, Google Drive or another Cloud. Click File, and then click Backup. Save the file in a safe place (remember the place). Close the old Enpass 5.6. Open the new Enpass 6. Click on Import Backup Locate the backup made in Enpass 5.6 Type Master Password and enjoy it!
  19. 3 points
    Firstly I love the new look and the new features but like @chribonn I can't use vaults for my use case; from a business perspective, I would like to make a vault for each client; unfortunately, I don't have 30 or so Google accounts to hand. I can understand that the vault name could change and so runs the risk of messing up the sync, perhaps just letting us choose where the file gets stored would work, that way we could just create subdirectories for each vault. Please add multiple vaults to sync with a single account.
  20. 3 points
    Yes! Please bring this back. If Android is safe enough to offer this, then I can't imagine Windows 10 not offering the hooks. Apart from the convenience: I really don't want people to be able read along when I type my master password. So actually one could argue that not offering Windows Hello on the first start-up , could actually be interpreted as a security flaw/risk... (imagine standing in a crowded metro trying to log into something). So please bring full-time Hello back, I had got myself a license for the UWP app just to have this! And @tox1c90 : it's even worse than just after a fresh boot: if you don't leave Enpass running in the task-tray it'll NEVER offer you Windows Hello login
  21. 3 points
    For unknown reasons I get this error sometimes asking me to start the desktop app, and the desktop app is already running, look at the photo attached, If I try a second time it will be fine
  22. 3 points
    Good Morning everyone Almost four months without any update on this thread. So whats the status about the Security Audit? Cheers SwissIndoor
  23. 3 points
    Hi, During WWDC this year, Apple announced support for third party password managers to autofill credentials in apps and Safari. This is a huge boost to the convenience of using password managers and should absolutely be added. Or perhaps you are already planning to
  24. 2 points
    Folks if you want a fully audited and open source tool with multi-platform support (desktop, phone, browser), why not go with Bitwarden? Downsides: mainly one dev, and uses it's own cloud hosting with Microsoft Azure. Everything has pros and cons. PS - Am not affiliated with Bitwarden by the way, just a new user there.
  25. 2 points
    Hello, I installed this last version with TestFlight. But I had to uninstall everything about enpass... And then this beta ask me to re-purchased to unlock the 20-things limitation... I had to uninstall, download again Enpass5, and overwrite it with this beta to get it working without limitations... For now it's working... But with my mac, my windows computer and my iPhone, it was a pain in the ass to get all working together and synching with dropbox without problems... (and still Chrome extension doesn't work... but it's for another topic this problem...) You should have made the transfert more friendly...