Jump to content
Enpass Discussion Forum

david rinnan

Members
  • Posts

    1
  • Joined

  • Last visited

Everything posted by david rinnan

  1. Due to my work, my computer and other icloud devices, are encrypted and always require login and are automatically logged out on screen saver etc etc. I was previously using 1password when you bought a lifetime license and were able to use icloud for your vault. At that time I had a very simple pin to unlock. They they changed to using their own web-based storage outside of my control which resulted in needing a fairly string master password. Due to this, and many other reasons, such as having to pay lots of money for something you have already bought..... I did research and found Enpass, which is great. They offer the ability to put my vault at icloud. From a security standpoint this means that I only have to trust one vendor, Apple iCloud. In order for someone to get access to my passwords they would have to breach Apple icloud, or my account there, which has 2fa etc etc. So I guess this is my question.......... given that I feel that my computer is secure and does not exist in an environment where people could grab my computer in the timeframe before the screen saver kicks in. I wonder if there is actually a need for a complicated master password? I need some help with my thinking here but these are my thoughts on the matter. 1. The master password is only relevant if someone actually has access to my vault. 2. The only way to get hold of my vault is to get access to my icloud account 3. Lets assume it would be totally impossible to breach my icloud account, which it of course isnt... in that case I wouldnt even need master password for my vault? Currently I have the configuration where I am asked for my master password if Enpass is restarted (update or computer restart) otherwise I use a simple pin code. But I have been considering changing the master password to the same as the pin, if possible, if it allows such a simple password, due to the above considerations. i.e. are we entirely sure that enpass does not backup/store my vault anywhere else but my local devices (for use) and icloud (main database). thanks
×
×
  • Create New...