tag:help.masterpassword.app,2014-09-03:/help/discussions/suggestions/2-user-wishesMaster Password: Discussion 2014-11-23T13:04:38Ztag:help.masterpassword.app,2014-09-03:Comment/344869652014-09-08T11:38:10Z2014-09-08T11:38:10ZUser Wishes<div><p>Hi Til,</p>
<p>Thanks for your message and ideas!</p>
<p>First of all, on the topic of saving master passwords: we do not
do this. Your master password is not saved, even if the device
remembers your user. The only thing we save is a cryptographic hash
of your master key, which allows nothing more than to check whether
you made a typo when entering your master password. Obtaining this
cryptographic hash of your master key doesn't help an attacker one
bit, since brute-forcing your master password out of it is
incalculably difficult.</p>
<p>Secondly, I understand many are looking for a sort of sync
functionality across their devices. I agree that it's a pain to
keep multiple devices in sync manually, and for the same reasons
that I initially implemented iCloud sync, I'm still looking for a
more reliable and cross-platform solution to this problem. Believe
me: iCloud was not the end-all.</p>
<p>Thirdly, this is mainly a tip/proposal for a workaround: you can
use an export file to facilitate the manual syncing you do now. For
instance, you make an export file on your iPhone, email it to
yourself, then open the file from your email on your Mac to import
the sites into your Mac user (or vice-versa). The Java client
currently does not support import files seeing as it cannot yet
remember sites and users. Support for this will be added in future
versions as well.</p>
<p>Thanks for your interest, Til, and let me know if there's
anything else on your mind!</p></div>Maarten Billemonttag:help.masterpassword.app,2014-09-03:Comment/344869652014-09-08T11:53:33Z2014-11-23T13:04:38ZUser Wishes<div><blockquote>
<p>I'm still looking for a more reliable and cross-platform
solution to this problem</p>
</blockquote>
<p>Other Apps provide a “multiple sync feature” via
iCloud, Dropbox, Google Play and WebDAV, the user chooses, which
one.</p>
<blockquote>
<p>on the topic of saving master passwords: we do not do this</p>
</blockquote>
<p>Great!</p>
<blockquote>
<p>you can use an export file to facilitate the manual syncing</p>
</blockquote>
<p>Does the export file contain not only the site name, but
also</p>
<p>(1) username for that site, (2) type of password (long, short,
PIN, ..) for that site, (3) last incremental for that site?</p>
<p>Regards,</p>
<p>Til Roquette</p>
<p>Gröbenbachstr. 30, 82194 Gröbenzell bei
München</p>
<p>Tel: +49 (8142) 2842-316, Fax: -316</p>
<p>Mobil: +49 (175) 296 97 07, <a href=
"mailto:til@roquette.de">til@roquette.de</a> <a href=
"mailto:til@roquette.de">til@roquette.de</a></p>
<p>Von: Maarten Billemont [mailto:<a href=
"mailto:tender2+d5ae131ac7808f758917af4893dc44c75504c699c@tenderapp.com">tender2+d5ae131ac7808f758917af4893dc44c75504c699c@tenderapp.com</a>]<br>
Gesendet: Montag, 8. September 2014 13:38<br>
An: <a href="mailto:til@roquette.de">til@roquette.de</a><br>
Betreff: Re: User Wishes [Suggestions #2]</p></div>tiltag:help.masterpassword.app,2014-09-03:Comment/344869652014-09-08T11:59:18Z2014-09-08T11:59:18ZUser Wishes<div><p>The export file contains a time-stamp of when you last used a
site, the amount of times you used it, the type of password you
want to generate for it along with its counter, your login-name for
the site and (but only if the password is custom and not generated)
an encrypted version of the site password. Everything necessary to
rebuild the data currently saved by the Master Password app.</p>
<p>We are indeed thinking of extending the export functionality to
send the export file to other apps, such as Dropbox, Drive, Box,
etc. as an intermediary.</p></div>Maarten Billemonttag:help.masterpassword.app,2014-09-03:Comment/344869652014-09-08T15:49:22Z2014-11-23T13:04:38ZUser Wishes<div><blockquote>
<p>The Java client currently does not support import files seeing
as it cannot yet remember sites and users. Support for this will be
added in future versions as well.</p>
</blockquote>
<p>In this case, I will be waiting until the Java</p>
<p>Mit freundlichem Gruß, Ihr</p>
<p>Til Roquette</p>
<p>Gröbenbachstr. 30, 82194 Gröbenzell bei
München</p>
<p>Tel: +49 (8142) 2842-316, Fax: -316</p>
<p>Mobil: +49 (175) 296 97 07, <a href=
"mailto:til@roquette.de">til@roquette.de</a> <a href=
"mailto:til@roquette.de">til@roquette.de</a></p>
<p>Von: Maarten Billemont [mailto:<a href=
"mailto:tender2+d5ae131ac7808f758917af4893dc44c75504c699c@tenderapp.com">tender2+d5ae131ac7808f758917af4893dc44c75504c699c@tenderapp.com</a>]<br>
Gesendet: Montag, 8. September 2014 13:59<br>
An: <a href="mailto:til@roquette.de">til@roquette.de</a><br>
Betreff: Re: User Wishes [Suggestions #2]</p></div>tiltag:help.masterpassword.app,2014-09-03:Comment/344869652014-09-09T08:38:27Z2014-11-23T13:04:38ZUser Wishes<div><p>Is there a way to inform me on updates on the java app?</p>
<p>Regards,</p>
<p>Til Roquette</p>
<p>Gröbenbachstr. 30, 82194 Gröbenzell bei
München</p>
<p>Tel: +49 (8142) 2842-316, Fax: -316</p>
<p>Mobil: +49 (175) 296 97 07, <a href=
"mailto:til@roquette.de">til@roquette.de</a> <a href=
"mailto:til@roquette.de">til@roquette.de</a></p>
<p>Von: Til Roquette | privat [mailto:<a href=
"mailto:til@roquette.de">til@roquette.de</a>]<br>
Gesendet: Montag, 8. September 2014 17:49<br>
An: 'Maarten Billemont'<br>
Betreff: AW: User Wishes [Suggestions #2]</p>
<blockquote>
<p>The Java client currently does not support import files seeing
as it cannot yet remember sites and users. Support for this will be
added in future versions as well.</p>
</blockquote>
<p>In this case, I will be waiting until the Java</p>
<p>Mit freundlichem Gruß, Ihr</p>
<p>Til Roquette</p>
<p>Gröbenbachstr. 30, 82194 Gröbenzell bei
München</p>
<p>Tel: +49 (8142) 2842-316, Fax: -316</p>
<p>Mobil: +49 (175) 296 97 07, <a href=
"mailto:til@roquette.de">til@roquette.de</a> <a href=
"mailto:til@roquette.de">til@roquette.de</a></p>
<p>Von: Maarten Billemont [mailto:<a href=
"mailto:tender2+d5ae131ac7808f758917af4893dc44c75504c699c@tenderapp.com">tender2+d5ae131ac7808f758917af4893dc44c75504c699c@tenderapp.com</a>]<br>
Gesendet: Montag, 8. September 2014 13:59<br>
An: <a href="mailto:til@roquette.de">til@roquette.de</a> <a href=
"mailto:til@roquette.de">til@roquette.de</a><br>
Betreff: Re: User Wishes [Suggestions #2]</p></div>tiltag:help.masterpassword.app,2014-09-03:Comment/344869652014-09-09T12:40:11Z2014-09-09T12:40:11ZUser Wishes<div><p>Hey Til,</p>
<p>The Java application checks for updates on start-up and shows a
notification if it's outdated. You can also follow our Google+
stream for any updates:<br>
<a href=
"https://plus.google.com/+Masterpasswordapp/posts">https://plus.google.com/+Masterpasswordapp/posts</a></p></div>Maarten Billemonttag:help.masterpassword.app,2014-09-03:Comment/344869652014-09-12T07:38:30Z2014-11-23T13:04:38ZUser Wishes<div><p>Hi Maarten,</p>
<p>to your info:</p>
<p>Do you know InputStick <a href=
"http://www.inputstick.com/">http://www.inputstick.com/</a> , an
USB stick connected via Bluetooth with smartphones, that can
emulate any USB device, e.g. a keyboard. This device could be used
by password manager on smartphones to “type” a password
on a PC or Mac. So, if you need to input a password on your PC you
take your smartphone and have it input the password for you
directly into the input field on the PC, regardless whether it is a
website or an application.</p>
<p>Up until now, there is only a version for Android. According to
the developer there will be a version for iOS, too, within 1-2
month for now.</p>
<p>However, I am not sure whether it would be more comfortable to
have a client software on a PC which actually stores site name,
username, password type (long, short, PIN, ..) and incremental to
generate the respective password so you can paste it into the
password field of a website or application (I recon that your Mac
client does exactly that?). This client software should sync name,
username, password type and incremental with smartphone, tablets or
such devices.</p>
<p>(btw: your websites seems to have a problem)</p>
<p>Regards, Til</p>
<p>Von: Jakub Zawadzki [mailto:<a href=
"mailto:jzawadzki@inputstick.com">jzawadzki@inputstick.com</a>]<br>
Gesendet: Freitag, 12. September 2014 01:04<br>
An: <a href="mailto:til@roquette.de">til@roquette.de</a><br>
Betreff: Re: Any Plans for InputStick to support iOS?</p>
<p>Hi Til,</p>
<p>Yes, I already have a few test units with Bluetooth 4.0 (Low
Energy) modules, which can be interfaced with Apple devices. I
still need to make a few firmware changes, before I can send them
to developers. At this moment I can't really tell how long will it
take before any iOS API / app supporting InputStick is ready, but I
guess maybe 1-2 months from now.</p>
<p>Best regards,<br>
Jakub Zawadzki</p>
<p>On 2014-09-11 19:04, Til Roquette | privat wrote:</p>
<p>Dear Jakub,</p>
<p>are there any plans for InputStick supporting iOS, so that iOS
Apps could emulate USB devices?</p>
<p>Regards,</p>
<p>Greetings from Munich, Germany</p>
<p>Mit freundlichem Gruß, Ihr</p>
<p>Til Roquette</p>
<p>Gröbenbachstr. 30, 82194 Gröbenzell bei
München</p>
<p>Tel: +49 (8142) 2842-316, Fax: -316</p>
<p>Mobil: +49 (175) 296 97 07, <a href=
"mailto:til@roquette.de">til@roquette.de</a> <a href=
"mailto:til@roquette.de">til@roquette.de</a></p>
<p>Von: Maarten Billemont [mailto:<a href=
"mailto:tender2+d5ae131ac7808f758917af4893dc44c75504c699c@tenderapp.com">tender2+d5ae131ac7808f758917af4893dc44c75504c699c@tenderapp.com</a>]<br>
Gesendet: Dienstag, 9. September 2014 14:40<br>
An: <a href="mailto:til@roquette.de">til@roquette.de</a><br>
Betreff: Re: User Wishes [Suggestions #2]</p></div>tiltag:help.masterpassword.app,2014-09-03:Comment/344869652014-09-12T14:09:19Z2014-09-12T14:09:19ZUser Wishes<div><p>Hey Til,</p>
<p>Thanks for the info. I had looked at InputStick before; it's an
interesting idea and a possible extension to Master Password in the
future.</p>
<p>Cheers,<br>
Maarten.</p></div>Maarten Billemont