Wouldn't someone concerned about security not want people to know which banks you have accounts in and what things you have all saved in here? The security of this app doesn't seem that good to me.Īnd security is just one aspect of the app. I asked about this and was told that they use the mac keychain and it only encrypts the value not the keys. They claim to have such great security, but when I opened up one of the supposedly encrypted files in notepad (try it for yourself) all the record titles were visible in clear text. I'm switching away from 1password now, so I think your friends will regret going in the other direction. The passwords entered in those controls aren't even visible in the process memory of KeePass. None of the available password edit control spies work against these controls.
This means that even if you would dump the KeePass process memory to disk, you couldn't find the passwords.Ĥ) Security-Enhanced Password Edit Controls: KeePass is the first password manager that features security-enhanced password edit controls. In contrast to many other hashing algorithms, no attacks are known yet against SHA-256.Ģ) Protection against dictionary and guessing attacks: by transforming the final master key very often, dictionary and guessing attacks can be made harder.ģ) In-Memory Passwords Protection: Your passwords are encrypted while KeePass is running, so even when the operating system caches the KeePass process to disk, this wouldn't reveal your passwords anyway. I'm not sure if you've talked about the other features below though.ġ) SHA-256 is used as password hash.
I've read much of your blog where you emphasize how strong your encryption is and how you've implemented features that slow down password crackers' attempts. I'd just like to see how 1P compares to Keepass on the following factors, both to know for myself and to address questions if they come up. They are security conscious people and have always recommended Keepass (Win) and KeepassX (Mac). Hey Agilebits, I just recommended 1Password to some friends and I know that at least one purchased your Win+Mac bundle.
0 kommentar(er)
