enpass

[henryfool3]

Has anyone tried enpass with the pixel with their latest update that should support face unlock?

 

[duratime]

I have enpass and I just looked for an update and there is none available. Face unlock is not an option as of right now. I turned on pin unlock for enpass. Not a bad work around.

 

[Mooncatt]

I turned on pin unlock for enpass. Not a bad work around.

Just a word of caution, PIN unlocks are not recommended for password managers. Instead of trying to crack a strong and complex password, a would be hacker only has to do a simple brute force attack. In no time they could have the keys to your kingdom. Last Pass caught a lot of flack for that too a few years back.

 

[duratime]

Just a word of caution, PIN unlocks are not recommended for password managers. Instead of trying to crack a strong and complex password, a would be hacker only has to do a simple brute force attack. In no time they could have the keys to your kingdom. Last Pass caught a lot of flack for that too a few years back.

If I understand it correctly, the pin unlock only works on the phone when it is unlocked. If you enter the wrong pin 3 times, you need the master password. If you restart your phone, you need the master password or if you kill/close the app, you need the master password. I would think it is more secure than face unlock alone, since you have to use face unlock to open the app, then a password or pass code. If it was all face unlock, then looking at your face twice gets you the keys.

 

[Mooncatt]

If I understand it correctly, the pin unlock only works on the phone when it is unlocked. If you enter the wrong pin 3 times, you need the master password. If you restart your phone, you need the master password or if you kill/close the app, you need the master password. I would think it is more secure than face unlock alone, since you have to use face unlock to open the app, then a password or pass code. If it was all face unlock, then looking at your face twice gets you the keys.

What savvy hackers can do is do a data dump of everything, giving them an exact copy of your system. Then they can play with it to their heart's content and "reset the simulation" (so to speak) when something goes wrong, without disrupting your real data. Once they figure out the manager's pin on their copy, they now know your info to attack when the time is right.

Is this a likely scenario? Not really, but it is possible. For something like a password manager app, I like to take extra precautions just in case.

 

[duratime]

What savvy hackers can do is do a data dump of everything, giving them an exact copy of your system. Then they can play with it to their heart's content and "reset the simulation" (so to speak) when something goes wrong, without disrupting your real data. Once they figure out the manager's pin on their copy, they now know your info to attack when the time is right.

Is this a likely scenario? Not really, but it is possible. For something like a password manager app, I like to take extra precautions just in case.

So are you suggesting to just use a strong password and no face unlock?

 

[Mooncatt]

So are you suggesting to just use a strong password and no face unlock?

A strong password, or fingerprint, yes. Face unlock is still too new and vulnerable for me to use it for anything. Especially with something like a password manager.

 

[duratime]

Enpass now supports face unlock! Just got the update.