sites profile syncing

gettons's Avatar

gettons

03 Jan, 2018 01:53 PM

Hello there,

pretty impressed by the idea around it. I have started taking a look at the app, however I am struggling to find a way to keep the sites profile ( the one you can export - import ) on external storage. Ideally some kind of integration with cloud based providers ( or even webdav ) would be beneficial so that the user does not have to manually export and import if using masterpassword on a second device.
As the profile does not contain too much of sensitive data, this could be an interesting option.
The main benefit being the fact that you don't have to : 1) export/import OR 2) remember the site configuration for all you logins ( as some sites have limitations when it comes to length of password and/or allowed characters in the password field ).

I am not sure if anyone else has already investigated the above ?

  1. 1 Posted by Tuq Sagago on 03 Jan, 2018 02:01 PM

    Tuq Sagago's Avatar

    Apart from being unnecessary, I think your idea is superfluous and defeats the main purpose of this unique system.

    Do you fully understand how it works?

    Sent from ProtonMail Mobile

  2. 2 Posted by gettons on 03 Jan, 2018 03:18 PM

    gettons's Avatar

    I belive I do, but I am not entirely sure you understood my question. Apologies for the bad wording.

    What I am saying here is say you have 200 entries, with a mixture of Maximum Security, Long, Medium, PIN password types and want to export the sites configuration, the only way is to actually export the file and import. Unless you remember the password requirements are for every single ones ( characters allowed, max password length, etc... )

    Given the secure export file looks like this :

    # Master Password site export
    # Export of site names and stored passwords (unless device-private) encrypted with the master key.
    #
    ##
    # User Name: bla bla
    # Avatar: 0
    # Key ID: blablablabla
    # Date: 2018-01-03T15:09:10Z
    # Version: 22222222222222.5.2
    # Format: 1
    # Passwords: PROTECTED
    ##
    #
    # Last Times Password Login Site Site
    # used used type name name password
    2018-01-03T14:55:15Z 0 17:3:1 user1 blue
    2018-01-03T14:55:28Z 0 16:3:1 user1 orange

    I see little to worry about if this file possibly gets stolen. It's indeed not ideal, as login name together with other fields is used to generate the password ( along with the masterkey ), but I am not sure the burden of having to export and import again whenever you want to add a new site is much more appealing. Unless of course you do it manually on all of your devices.

  3. 3 Posted by Tuq Sagago on 04 Jan, 2018 01:35 PM

    Tuq Sagago's Avatar

    Personally, I don't see such a feature as a priority - given the speed and convenience of the current configuration together with the security benefits of it being off-line.

    Are the risks of third party cloud integration worth it? It may harm the reputation of mpw's USP which, for me, is its off-line nature.

    Have you considered using something like [Hazel](http://www.noodlesoft.com/hazel.php) or [Maid](https://github.com/benjaminoakes/maid)?

    Sent with [ProtonMail](https://protonmail.com) Secure Email.

Reply to this discussion

Internal reply

Formatting help / Preview (switch to plain text) No formatting (switch to Markdown)

Attaching KB article:

»

Attached Files

You can attach files up to 10MB

If you don't have an account yet, we need to confirm you're human and not a machine trying to post spam.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac

Recent Discussions

15 Jan, 2018 09:39 PM
04 Jan, 2018 01:35 PM
27 Dec, 2017 05:42 PM
19 Dec, 2017 05:44 PM
15 Dec, 2017 04:22 PM

 

15 Nov, 2017 01:51 AM
21 Oct, 2017 05:17 PM
18 Oct, 2017 08:29 PM
17 Oct, 2017 02:59 AM
02 Oct, 2017 11:56 PM
26 Sep, 2017 03:16 PM