|
|
|
|
|
by jayfuerstenberg
4855 days ago
|
|
My app KEYBOX (shameless plug - https://itunes.apple.com/us/app/keybox-password-manager-secr...) encrypts everything, not just the passwords. It goes without saying that you'd want to keep all the fields of a secret encrypted but it's also important to note that the plaintext fields can offer clues about the nature of the encrypted parts. Calling a secret "Bank account" (plaintext) and only encrypting the PIN code tells an intruder that what is encrypted is a 4 digit code ranging from 0000-9999. If instead you encrypt the entire record the nature of the contents is entirely unknown. I have respect for the fine folks at AgileBits but I don't agree with their approach to security and took the more thorough approach I mention above in KEYBOX. |
|