tempnexus
Premium
join:1999-08-11
Boston, MA
| How Secure is RoboForm?
I have been using it for over a year and I like it very much but each time I get weary with the fact that the software is storing most of my passwords in one place and if it were to get compromised then most of my eggs are lost along with the basket.
Hence here are my questions:
1) How secure is RoboForm from external and internal exploits?
2) How secure is the password encryption that the roboform stores the files? If someone were to take your roboform files and assuming that your Master password was strong then could he/she be able to decrypt it?
3) Are there any loop holes in protection? |
|
SqueeksDad
I Miss Her
Premium
join:2002-09-14
Silver Spring, MD
clubs: 
 ·Verizon FIOS
 ·Verizon Online DSL
| said by tempnexus  :I have been using it for over a year and I like it very much but each time I get weary with the fact that the software is storing most of my passwords in one place and if it were to get compromised then most of my eggs are lost along with the basket. Hence here are my questions: 1) How secure is RoboForm from external and internal exploits? 2) How secure is the password encryption that the roboform stores the files? If someone were to take your roboform files and assuming that your Master password was strong then could he/she be able to decrypt it? 3) Are there any loop holes in protection? Q: How are my Identities and Passcards encrypted?
A: Your Identities and Passcards are encrypted using AES, BlowFish, RC6 or 3DES algorithm and the encryption / decryption key is generated from the Master Password. This encryption method makes your data very secure and even if hackers come into possession of your Identity and Passcard files, they will have to crack one of these encryption algorithm without knowing the key which is considered impossible. By default AES encryption is used.
--
Ways to Relieve Stress #10. Make up a language and ask people for directions. |
|
Bubba1
Less is More
Premium
join:2006-09-21
edit:
May 13th, @02:44PM
| reply to tempnexus
Bought my first license in Oct. of '04 and have yet to read/hear of anyone even suspicion their passwords were vulnerable.
Of course, that doesn't prove it's secure .. but, if it weren't, I still think we'd have heard something. Don't you?
And, if it's not secure .. it's not paddling that boat alone!  As others employ the same encryption algorithm's.
As to having all eggs in a single basket? Suggest you might consider purchase of a Roboform2Go license. Throwing them eggs onto a USB flash drive, worn around the neck, gives access from almost any desired computer.
And, certainly right now, I do not fear loss/theft of the drive. Should that happen, I'd use the trusty generator to create replacement eggs, just on a principle of being "sure", if for no other reason. 
edit: spelling/composition
--
"Fast is fine, but accuracy is everything" --Wyatt Earp |
|
