Admin: Admin moved page Security to Mobile Password Safe Security without leaving a redirect: Too generic title

2021-11-12T15:06:19Z

Admin moved page Security to Mobile Password Safe Security without leaving a redirect: Too generic title

Lori: Lori moved page Details on Security to Security

2020-04-24T19:37:54Z

Lori moved page Details on Security to Security

Lori: Create Mobile Password Safe Details on Security

2020-04-20T18:29:01Z

Create Mobile Password Safe Details on Security

New page

=== Country of origin ===

The [http://www.tonic.to/ Tonic] company made a deal with the country of [http://en.wikipedia.org/wiki/Country_codes:_T#Tonga Tonga] and has a business selling the country's domain names (.to) for a profit ($50/year compared with $8-$15 per year).

However, you can still get short domains, which was what we wanted for cell phone applications, no?

(You want to type [http://mobilepasswordsafe.com/ mobilepasswordsafe.com] on your cell phone?)

Market Acumen, Inc. is based in U.S.A. in '''Media, Pennsylvania, USA.'''

Our hosting provider is [http://aws.amazon.com/ Amazon Web Services] in their data center in Oregon, USA.

So, your data is stored in the USA.

=== Security Practices ===

The connection is encrypted with SSL, however '''because nothing is ever sent to our servers in plain text''', the application is sufficiently secure for most personal or business purposes now.

The first time you enter your password, we send a [https://pw.ex.to/help/hash.php cryptographic fingerprint] (SHA256 Hash) of your password to our servers and store it so we can verify it is correct when you visit the page again.

We generate your encryption key by running your password through 9 rounds of SHA 256 to generate a sufficiently random password key.

We use the [http://en.wikipedia.org/wiki/Advanced_Encryption_Standard Advanced Encryption Standard] in CBC mode for encryption.

The next time you log in, '''nothing''' is sent to our servers; we just check the SHA 256 password against what we already know.

When you load the first page, all of the encrypted data is on the page already. Your password, once verified, then decrypts the information on the page.

When you add an entry, we '''encrypt it''', then send it to our server for storage.

When you delete an entry, we simply delete it on our end.

When we encrypt your password entry, we pad the beginning and end of the encrypted password entry with '''garbage''', ranging from 50 to 100 random characters.

[[Category:Mobile Password Safe]]

← Older revision	Revision as of 15:06, 12 November 2021
(No difference)

← Older revision	Revision as of 19:37, 24 April 2020
(No difference)

Mobile Password Safe Security - Revision history

Admin: Admin moved page Security to Mobile Password Safe Security without leaving a redirect: Too generic title

Lori: Lori moved page Details on Security to Security

Lori: Create Mobile Password Safe Details on Security