Security

[Sophi]

Hi all, I'm looking for a reliable password manager. I have a question, does Enpass have protection in case my laptop is stolen? I carry it around a lot and wonder if it's safe to keep passwords on it?

[Ivarson]

I think any password manager does just that, almost by definition password managers does two things;

A. Requires at least a password to read secrets

B. Encrypts the database in such way that it's impossible or impractible to read the secrets without that first password.

You need to have a good password on your laptop, and also a strong password in Enpass.

Your computers harddrive should be encrypted which is the default on modern devices.

If your laptop is stolen, those are your asurances, as the data of Enpass resides locally, and you can't just call Enpass and have them "flush" the saved passwords on your stolen laptop.

[Abhishek Dewan]

Hi @Sophi

Welcome to the Enpass Forums.

Adding to @Ivarson's comment, Enpass is an offline password manager, so all your data is stored locally on your device, and we have no access to it. This ensures maximum security for your confidential data. Moreover, your data in Enpass is fully encrypted by a 256-bit AES encryption, SQLCipher peer-reviewed, open-source encryption engine, and 100,000 rounds of PBKDF2-HMAC-SHA512. As a result of this level of encryption, you are protected against brute force attacks and side-channel attacks. If your laptop is stolen and a hacker manages to gain access to your vault, only encrypted data/characters will be visible to him.

 

Using biometric data, such as fingerprints or face IDs, the chances of a successful attack are virtually zero. The Enpass App is designed on a zero-knowledge policy, requiring only a Master Password to access your data.

 

You will be interested in knowing that Enpass also provides a Portable(USB/Pen-Drive) KeyFile option, which acts as a 2FA, which means the login requires the master password as well as the key file combination to authenticate. By doing so, even if your laptop gets stolen and a hacker figure outs your Master Password, it will be impossible for him to access your information without a portable Key file.