Frosty

After long thinking about my online security I've decided to leave Enpass and migrate to another password manager. Not because Enpass is not a good tool / password manager. But in my opinion I've less control about my vaults. I want to:

- Get a notification when someone tried to login to my Vaults 

- Have Yubikey (or another hardware key) support

- Have the possibility to remotely revoke a device to access to one of my Vaults / delete Vaults on devices

I understand that Enpass is designed with other principles but for me is this essential to have faith in my online security.  

On 11/10/2020 at 7:59 AM, Pratyush Sharma said:

Hi @Frosty,

I have already created a feature request for the same. It's already in our roadmap for future versions.

Thanks for your co-operation.

Thank you. I saw a sneak peak on Twitter but I think that's a dashboard and nog a online password service(?) Can you mention something about the release date/planning?

On 11/6/2020 at 9:59 AM, Hitman said:

I think you can counter that by using WebDAV for sync. There you can track from where the access comes when syncing. Also you can change the WebDAV credentials when a device is stolen.

When a device is stolen with a vault on it (which is always available offline), you have to consider the content compromised (unless you really trust your master password and didn't store it using fingerprints). So if you change all your passwords and the one of your vault, the old information on the stolen device is useless. Triggering a remote wipe (via iOS or Android) is probably a better choice, though.

- Yes there is a logging on the WebDAV-connections. I prefer a pro-active solution of attending a unusual login.

- Change all the passwords from the items in the vault is a enormous, and time sensitive job. So, indeed, wiping the device is the best/fastest way to handle.

Bottomline I think the best solution will be a Enpass cloud service (like 1Password, Dashlane, etc.) to handle both situations.

@Productowner Enpass ; Is this functionality on the backlog/roadmap of new Enpass features in the (near) future?

The way Enpass works, is a slightly different way than many other passwordmanagers like for example 1Password. I like the idea of Enpass, but I think I also missing some features that the others have:

- I will get noticed when (one of) my Vaults is (tried to) opened by another location

- I will have the ability to disconnect my device from the Vault(s) when it's lost/stolen > now the vault is stored on the device. And I know it's hard to hack the vault, but it's not a safe idea that I don't have any control when my device is lost. The only way to handle this is to erase my whole iPhone with the 'find my iPhone'-app or in the Apple iCloud.

On 11/4/2020 at 7:07 AM, Garima Singh said:

Hey @Frosty

We appreciate your suggestion on the Yubikey support. Please note that we already have a feature request for the same and aligned for implementation in the future. However, we’re not sure of a specific timeline when this will be implemented. Thanks!

 

Cool, thanks! I hope this feature will be released in short term. Just a master password for a password manager is a bit risky imo

On 10/8/2020 at 7:44 AM, Garima Singh said:

Hey @RDL

We are listening to our users and will actively make changes to the app update based on the constructive feedback we have been receiving, so thank you for getting in touch. I shall pass your comments onto our team. Thanks for the suggestion!

Great. Would you also adding Yubikey/hardware-key support on de backlog off the Enpass product owner?

On 7/22/2020 at 3:30 PM, Pratyush Sharma said:

Hi @Thomas Vogel,

Thanks for writing in.

I would like to share that this feature is already in our road map and our team is working on it. Hopefully, the same will be available in the future version of Enpass. Your patience will be highly appreciated.

Thanks for understanding.

That will be great when Enpass supports Yubikey! Where can I find the Enpass roadmap for new features and release dates?