seancojr

20 hours ago, WonderPass said:

So much to unpack here.

Yes I did research this hence I know how it works.

Dropbox being big and successful does not make them right in all of their decisions. If you’ve worked for a large company some of the worst design decisions are dressed as a feature because it’s easier than fixing the underlying issue

The poor architecture is the failure to anticipate that whilst locking down access of the app it then precludes interaction with those files with other users. You may consider my position arrogant but the fact that Enpass is supposed to allow shared vaults would indicate that this architecture doesn’t fit actual use cases. That the solution is to create this hyper restricted folder indicates that the all or nothing OAUTH model is on reflection a poor design.

But frankly my opinion is unimportant as I have deleted Enpass.

Fair point about company success. I won't restate my previous thoughts about why they seem to take the current stance and use an app folder, because an member of their team already spoke on that. In the end, it's up to consumers to present a great demand to influence the direction of product development. Perhaps, the Enpass team will change how the program connects to cloud storage. Time will tell. Furthermore, your opinion is important. I wish you wouldn't feel such a way.

WonderPass, I am curious to know if you've done research to be able to make the following statement—or if this your personal conclusion.

On 1/31/2019 at 8:09 PM, WonderPass said:

Dropbox in their wisdom have locked down the App folder to be unshareable - which suggests an underlying flaw in their architecture that they have had to do that.

 I can't imagine that a company as successful as Dropbox made a business decision only for it be deemed as a “flaw in their architecture”. I feel inclined to believe it is more likely they offer this as a solution for reasons related to security.

As such, I've taken a few minutes to find reference material that addresses your concern.

Dropbox allows third-party developer apps to request access to a Dropbox account via two methods.

• A specific folder in your Dropbox account. The app can only access files in that folder.
• All folders and files in your Dropbox account.

The second method was previously addressed by Vinod, in his statement:

On 12/29/2018 at 8:05 AM, Vinod Kumar said:

Hi all,

The access to a cloud resource is controlled by OAuth tokens. Suppose, you were able to create two vaults on your cloud account and you want to share one of it with another person. You need to set up sync on his device by yourself, with your cloud credentials at least once, as you certainly won't reveal your cloud password to him. But another person in possession of access token can access the whole drive area including your primary vault. If another person has malicious intentions he could delete/copy/replace your primary vault data file.

Hope this clears the air.

 

When designing Enpass, the team opted to request access to a specific folder so that a scenario such as the one described above doesn't occur, should a user's OAuth token become compromised—and it could happen, just as Vinod explains, you link your Dropbox account to a device owned by friend/partner/relative, granting them access to all of your folders and files... if their device or the OAuth token used to authenticate to Dropbox become compromised, then too does everything you have depended on Dropbox to securely store. I understand, we are speaking of probability for the incident to occur. What frightens me is what would happen if that did occur and how the user would respond. Someone would be blamed and it would be a a choice between the developers of Dropbox and Enpass.

On 2/8/2019 at 12:12 PM, LoieJ said:

Wow, that is a lot of steps. I think I could do that, although my Enpass has so few entries that I could write them down by hand, delete the apps, download again, and reenter everything, (probably.) In any case, before I do all those steps, I want to follow through on getting the data out of my previous PW back up app and into Enpass somehow. Or maybe do your steps and then try to migrate the data to Enpass. I am concerned that all this info is in the cloud (and computer if I use the local back up) and then, PooF, maybe it goes away. My previous app is gone on one of my devices, never to be returned, as it isn't in the store any more. Then Enpass pulls this upgrade, after people paid for the lifetime license. Since I plan to purchase a new phone with a different OS, I may be going through the ritual again. Deep breath....Thanks for all the info. I am sure that it will be helpful, as you explain well. Is your post public?

It does appear that way, huh? Technically, it's about 7 steps but I chose to write them with as much detail because this is after all, our precious password (and other data) we're discussing. Also, the post should be public.

4 hours ago, Anshu kumar said:

Tap remove from favorite on the detail screen of the item.

Hope this helps!

Anshu, I wonder if HanXolo meant having the option manage the sidebar in order to hide Favorites from the tab bar, like you can choose which categories to display in the sidebar— and almost in the same way someone can go to the View menu (on a desktop computer) to hide Categories, Tags, Password Audit, and Others. In which case, that is not a feature currently implemented and the best solution is what you suggested.

I agreed to share information on how I resolved my issues with getting Enpass to sync across multiple devices. Before doing that, I give a full disclaimer. I am not a member of the Enpass team and any information or opinions shared here forth are my own. If you take my advice, you do so at your own risk. 

My device setup: Windows 10 with Enpass v.6.0.4 and Android v9.0.0 with Enpass (beta) v.6.0.4

Important: Before you follow any steps I include below, I advise you to take a backup of all your Enpass vaults on your desktop computer as outlined in the Enpass user guide.
Before moving on, make sure you have a record of what your password is for the vaults stored on all devices. This is especially important for an upcoming step when you will restore a backup.

Now, if you are seeing two different wallet files in Dropbox (i.e. “sync.default.walletx” and “vault.enpassdbsync”) then that typically means one or more of your device is using an older wallet version. The file “vault.enpassdbsync” is the newer version that follows the release of Enpass v6.x.x. 

What I did was backup my Enpass wallet on my mobile phone over Wi-Fi. You can do this by going to Enpass settings > Advanced > Backup> Over Wi-Fi. Afterward, you can download this file to your desktop computer. I saved it to the same location where Enpass stores “Auto Backups”. You’ll understand why, later. If you don’t have this setting enabled yet, do it now.

The Auto Backups location will vary by operating system (Windows, Linux, OSX). I run Windows 10 and I changed it to point to a folder on my external hard disk drive. You can check under Enpass settings > Auto Backups for your folder location. Important: Take note of the filename for the backup you’re downloading to your desktop via Wi-Fi. It named my backup “2019-02-07-1549541890367-3_vaults-1189_items_2_attachments-google Pixel sailfish”. The most important thing to note is the number of items stored in that backup. In my case, there were 1,189 items stored on my Google Pixel phone. Note: At this step, we have not yet restored any data on the desktop computer.

Next, you will want to you “export” your Enpass wallet using the desktop client, to a different location. Go to Enpass Menu > File > Export. You will need this file later to import data and merge it with the restored backup from your mobile phone. Name the exported file something like “Enpass-<computer name>-<current date>.json”.

After the export is complete, it is time to erase the data stored in Enpass on both your desktop computer and mobile phone. This done by going to Enpass settings > Advanced and click on “Erase Everything”. Note: This will also disconnect the Enpass app from your Dropbox account. which you want to happen. Repeat these same steps on your mobile phone. Essentially, we are resetting Enpass to a pre-install state.

Earlier, I stated you might two wallet files in Dropbox. Log in to Dropbox and delete those files. Yes, delete both. Once you have, you can restore the data we backed up over Wi-Fi connection earlier. If you saved it to the “Auto Backups” location, when you go to Enpass settings > Auto Backups and click on “Previous Backups”, there will be a restore point containing the number of items stored in the backup taken from your mobile phone.

Review the passwords and other Enpass items that should now appear in your vault. If it satisfies you, continue. Otherwise, you can either erase everything from Enpass and rollback to your original vault or start over with the instructions I’ve written.

Remember the exported file you created earlier on your desktop computer? It’s time to “import” that file. Why import? Well, it is because Enpass will merge items it imports with data in an existing vault. Whereas, my understanding is that when you restore a backup it overwrites all items in the vault.

Review the passwords and other Enpass items you have just imported. If everything looks okay, applaud yourself. The only step remaining is to set up sync on your desktop computer to synchronize your new vault data. Afterward, set up sync on your mobile phone to the same Dropbox account. This is to restore data that your desktop computer would have just synchronized. Also, if you had multiple vaults originally, you can recreate them on the desktop computer then go to Enpass settings > Vaults, select the vault and set up sync to restore the data for additional vaults. Keep in mind that vaults are intended to be used with a different cloud storage account. I have three vaults (Primary, Family, and Work) and I sync them to Dropbox, Google Drive and OneDrive, respectively. I do not have to sync to an entirely different cloud storage service—that is my personal choice.

On 1/10/2019 at 12:24 PM, PhreePhly said:

So, I still cannot sync from my PC to dropbox. Syncing works on my iPhone. Is there anything that the developers can tells us regarding fixing this issue? The whole reason for having a password manager in the cloud is to allow seamless syncing and usability between various devices.

On 1/20/2019 at 3:44 PM, twisme said:

Same here. Still not being able to set up sync wit dropbox on more than one installation (error codes while setting up sync on android).

On 1/25/2019 at 10:38 AM, spelevinken said:

Dropbox sync not working, sync seems random (or not at all syncing). Should I worry that my passwords is "synced out", that is lost due to bad sync. Update or adding new entry is not syncronized, depending on source.

I do not feel comfortable, should I write down my passwords on paper just in case?

On 1/25/2019 at 11:03 AM, LoieJ said:

Sure disappointed that Enpass hasn't addressed these issues. And after I paid for Enpass! (Also after my previous wonderful password syncing program was pulled from the store.) I am finding that i get a Dropbox sync, but only after I manually make it happen. It takes going two layers down into drop down menus on the computer version. Then I check the drop box file to see it it is there. Shouldn't have to do that. I set up a fake entry so I can see if there are changes. Not sure about my phone getting the data. I had to again reenter my Dropbox pw. Then it seemed "seemed" to work. I tried reentering OneDrive pws but that was a waste of time. BTW OneDrive is no longer backing up several of my other fav apps. So pdfft on MS.

Hey guys, I had similar issues to your own. I resolved them today and I can now access my passwords from three vaults, from my home computer and mobile phone. I sync one vault to Dropbox, another to Google Drive, and the third one goes to OneDrive. I am willing to help but right now I am starting my work. I will set a reminder to check back later and try to offer tips. Meanwhile, please reply here to tell me what operating system you are using Enpass with and which version of Enpass you have installed, on each device where passwords are stored.

On 1/19/2019 at 4:58 AM, Anshu kumar said:

Hey guys,

Thanks for your suggestion.

I have noted it down and it will be available with the future version of Enpass.

Thanks!

Thank you for receiving our feedback. I look forward to the future version of Enpass.

Enpass 6 has not entered final release state. Are you for certain you did not download the beta client from here? Were you using a beta version of Enpass 5?

I would really like to see this receive support as well. Steam is one of the few services I use that Enpass overlooks when it comes to TOTP.

While exporting from Enpass to CSV, I received the warning message "Attachments will not be exported with this operation." It was then that I realized that Enpass currently does not provide a convenient way to filter the list of records to those that include attachments.

As an Enpass user, I would like to select a category on sidebar that shows me only those records with an attachment. This would double as a feature to help me quickly determine if I need to update or remove attachments stored in Enpass. After several are stored, I am sure that the average user would forget which records contain attachments.

Actually, after installing Enpass 6 (beta), I see that it has this feature implemented.