User Wishes

til's Avatar

til

08 Sep, 2014 10:39 AM

Dear Maarten,

I (like many) beleive, that the concept you apply is great. However, there are some caveats that makes the tool hard to use:

I am using different devices for websites, Apps, Service etc. that require username and password: iPhone, iPad, PC, Notbook.

And, I would like to use individual passwords for each site/app/service, without having to remember them and without having to save them somewhere.

However, I do not want to remember (1) username, (2) type of password (long, short, PIN, ..), (3) last incremental (digit, number) for each site/app/service.

Hence, would be handy if your your tools would save these informations for each site/app/service for each app (ios, android, java). And it would be handy if I would not habe to keep them sync manually. I know, you just eliminated iCloud sync - but this is, what many users want.

And yes: In this case if (1) some would gain access to this database and (2) could find our my invididual masterpassword, he/she could generate all my passwords. Therefore, I would not save the masterpassword in the clients but have the user type it in each time he/she starts the client.

Regards, Til

  1. Support Staff 1 Posted by Maarten Billemo... on 08 Sep, 2014 11:38 AM

    Maarten Billemont's Avatar

    Hi Til,

    Thanks for your message and ideas!

    First of all, on the topic of saving master passwords: we do not do this. Your master password is not saved, even if the device remembers your user. The only thing we save is a cryptographic hash of your master key, which allows nothing more than to check whether you made a typo when entering your master password. Obtaining this cryptographic hash of your master key doesn't help an attacker one bit, since brute-forcing your master password out of it is incalculably difficult.

    Secondly, I understand many are looking for a sort of sync functionality across their devices. I agree that it's a pain to keep multiple devices in sync manually, and for the same reasons that I initially implemented iCloud sync, I'm still looking for a more reliable and cross-platform solution to this problem. Believe me: iCloud was not the end-all.

    Thirdly, this is mainly a tip/proposal for a workaround: you can use an export file to facilitate the manual syncing you do now. For instance, you make an export file on your iPhone, email it to yourself, then open the file from your email on your Mac to import the sites into your Mac user (or vice-versa). The Java client currently does not support import files seeing as it cannot yet remember sites and users. Support for this will be added in future versions as well.

    Thanks for your interest, Til, and let me know if there's anything else on your mind!

  2. Maarten Billemont closed this discussion on 08 Sep, 2014 11:38 AM.

  3. til re-opened this discussion on 08 Sep, 2014 11:53 AM

  4. 2 Posted by til on 08 Sep, 2014 11:53 AM

    til's Avatar

    > I'm still looking for a more reliable and cross-platform solution to this problem

     

    Other Apps provide a “multiple sync feature” via iCloud, Dropbox, Google Play and WebDAV, the user chooses, which one.

     

    > on the topic of saving master passwords: we do not do this

     

    Great!

     

    > you can use an export file to facilitate the manual syncing

     

    Does the export file contain not only the site name, but also

    (1) username for that site, (2) type of password (long, short, PIN, ..) for that site, (3) last incremental for that site?

     

     

    Regards,

     

    Til Roquette

    Gröbenbachstr. 30, 82194 Gröbenzell bei München

    Tel: +49 (8142) 2842-316, Fax: -316

    Mobil: +49 (175) 296 97 07, <mailto:[email blocked]> [email blocked]

     

     

    Von: Maarten Billemont [mailto:[email blocked]]
    Gesendet: Montag, 8. September 2014 13:38
    An: [email blocked]
    Betreff: Re: User Wishes [Suggestions #2]

  5. Support Staff 3 Posted by Maarten Billemo... on 08 Sep, 2014 11:59 AM

    Maarten Billemont's Avatar

    The export file contains a time-stamp of when you last used a site, the amount of times you used it, the type of password you want to generate for it along with its counter, your login-name for the site and (but only if the password is custom and not generated) an encrypted version of the site password. Everything necessary to rebuild the data currently saved by the Master Password app.

    We are indeed thinking of extending the export functionality to send the export file to other apps, such as Dropbox, Drive, Box, etc. as an intermediary.

  6. Maarten Billemont closed this discussion on 08 Sep, 2014 11:59 AM.

  7. til re-opened this discussion on 08 Sep, 2014 03:49 PM

  8. 4 Posted by til on 08 Sep, 2014 03:49 PM

    til's Avatar

    > The Java client currently does not support import files seeing as it cannot yet remember sites and users. Support for this will be added in future versions as well.

     

    In this case, I will be waiting until the Java

     

    Mit freundlichem Gruß, Ihr

     

    Til Roquette

    Gröbenbachstr. 30, 82194 Gröbenzell bei München

    Tel: +49 (8142) 2842-316, Fax: -316

    Mobil: +49 (175) 296 97 07, <mailto:[email blocked]> [email blocked]

     

     

    Von: Maarten Billemont [mailto:[email blocked]]
    Gesendet: Montag, 8. September 2014 13:59
    An: [email blocked]
    Betreff: Re: User Wishes [Suggestions #2]

  9. Maarten Billemont closed this discussion on 08 Sep, 2014 06:34 PM.

  10. til re-opened this discussion on 09 Sep, 2014 08:38 AM

  11. 5 Posted by til on 09 Sep, 2014 08:38 AM

    til's Avatar

    Is there a way to inform me on updates on the java app?

     

    Regards,

     

    Til Roquette

    Gröbenbachstr. 30, 82194 Gröbenzell bei München

    Tel: +49 (8142) 2842-316, Fax: -316

    Mobil: +49 (175) 296 97 07, <mailto:[email blocked]> [email blocked]

     

     

    Von: Til Roquette | privat [mailto:[email blocked]]
    Gesendet: Montag, 8. September 2014 17:49
    An: 'Maarten Billemont'
    Betreff: AW: User Wishes [Suggestions #2]

     

    > The Java client currently does not support import files seeing as it cannot yet remember sites and users. Support for this will be added in future versions as well.

     

    In this case, I will be waiting until the Java

     

    Mit freundlichem Gruß, Ihr

     

    Til Roquette

    Gröbenbachstr. 30, 82194 Gröbenzell bei München

    Tel: +49 (8142) 2842-316, Fax: -316

    Mobil: +49 (175) 296 97 07, <mailto:[email blocked]> [email blocked]

     

     

    Von: Maarten Billemont [mailto:[email blocked]]
    Gesendet: Montag, 8. September 2014 13:59
    An: <mailto:[email blocked]> [email blocked]
    Betreff: Re: User Wishes [Suggestions #2]

  12. Support Staff 6 Posted by Maarten Billemo... on 09 Sep, 2014 12:40 PM

    Maarten Billemont's Avatar

    Hey Til,

    The Java application checks for updates on start-up and shows a notification if it's outdated. You can also follow our Google+ stream for any updates:
    https://plus.google.com/+Masterpasswordapp/posts

  13. Maarten Billemont closed this discussion on 09 Sep, 2014 12:40 PM.

  14. til re-opened this discussion on 12 Sep, 2014 07:38 AM

  15. 7 Posted by til on 12 Sep, 2014 07:38 AM

    til's Avatar

    Hi Maarten,

     

    to your info:

     

    Do you know InputStick <http://www.inputstick.com/> , an USB stick connected via Bluetooth with smartphones, that can emulate any USB device, e.g. a keyboard. This device could be used by password manager on smartphones to “type” a password on a PC or Mac. So, if you need to input a password on your PC you take your smartphone and have it input the password for you directly into the input field on the PC, regardless whether it is a website or an application.

     

    Up until now, there is only a version for Android. According to the developer there will be a version for iOS, too, within 1-2 month for now.

     

    However, I am not sure whether it would be more comfortable to have a client software on a PC which actually stores site name, username, password type (long, short, PIN, ..) and incremental to generate the respective password so you can paste it into the password field of a website or application (I recon that your Mac client does exactly that?). This client software should sync name, username, password type and incremental with smartphone, tablets or such devices.

     

    (btw: your websites seems to have a problem)

     

    Regards, Til

     

     

     

     

    Von: Jakub Zawadzki [mailto:[email blocked]]
    Gesendet: Freitag, 12. September 2014 01:04
    An: [email blocked]
    Betreff: Re: Any Plans for InputStick to support iOS?

     

    Hi Til,

    Yes, I already have a few test units with Bluetooth 4.0 (Low Energy) modules, which can be interfaced with Apple devices. I still need to make a few firmware changes, before I can send them to developers. At this moment I can't really tell how long will it take before any iOS API / app supporting InputStick is ready, but I guess maybe 1-2 months from now.

    Best regards,
    Jakub Zawadzki

    On 2014-09-11 19:04, Til Roquette | privat wrote:

    Dear Jakub,

     

    are there any plans for InputStick supporting iOS, so that iOS Apps could emulate USB devices?

     

    Regards,

     

    Greetings from Munich, Germany

     

     

     

    Mit freundlichem Gruß, Ihr

     

    Til Roquette

    Gröbenbachstr. 30, 82194 Gröbenzell bei München

    Tel: +49 (8142) 2842-316, Fax: -316

    Mobil: +49 (175) 296 97 07, <mailto:[email blocked]> [email blocked]

     

     

    Von: Maarten Billemont [mailto:[email blocked]]
    Gesendet: Dienstag, 9. September 2014 14:40
    An: [email blocked]
    Betreff: Re: User Wishes [Suggestions #2]

  16. Support Staff 8 Posted by Maarten Billemo... on 12 Sep, 2014 02:09 PM

    Maarten Billemont's Avatar

    Hey Til,

    Thanks for the info. I had looked at InputStick before; it's an interesting idea and a possible extension to Master Password in the future.

    Cheers,
    Maarten.

  17. Maarten Billemont closed this discussion on 12 Sep, 2014 02:09 PM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac

Recent Discussions

09 Oct, 2023 03:28 PM
09 Oct, 2023 02:56 PM
22 Jun, 2022 11:22 AM
02 Feb, 2022 02:22 PM
25 Jan, 2022 11:25 PM

 

31 Dec, 2021 11:42 AM
22 Dec, 2021 06:41 PM
04 Nov, 2021 01:24 AM
30 Oct, 2021 08:29 PM
21 Oct, 2021 08:44 AM
14 Sep, 2021 08:02 AM