Reply to thread

Message

<blockquote data-quote="HarborFront" data-source="post: 1017363" data-attributes="member: 55987">But those are secured AWS servers and so far there&#039;s no news of their servers being breachedRegardless, even if the servers are breached, Sticky Password utilizes <a href="https://www.bitcatcha.com/go/sticky-password-security" target="_blank">Zero-Knowledge security</a>, which throws the ball to the user to remember their Master Password. They won’t keep that password, and data from the vault cannot be read without that master password.Hence, it’s practically impossible for data thieves to read your data, even if they manage to somehow breach Sticky Password’s considerably secure fortresses.[URL unfurl=&quot;true&quot;]https://www.stickypassword.com/downloads/Sticky_Password_Security_WhitePaper.pdf?v=3[/URL][URL unfurl=&quot;true&quot;]https://www.bitcatcha.com/best-password-managers/sticky-password-review/[/URL]QuoteThe storage space and back-end system reside on secure Amazon AWS services (Amazon S3 and Amazon EC2). All stored data is also backed up to the user’s local devices covered by the license.UnquoteIf you feel cloud is unsafe then can use local WiFi or manual for sync. I&#039;m not sure whether it can backup to your favorite cloud and sync from thereThe CONS I can find of Sticky Password are1) Not FOSS2) No security audit being done3) No different vaults for different purpose4) No recovery option if master password is lost5) No custom field support6) Need GA on mobile device to enable 2FASticky Password says Google Authenticator is needed on mobile device to enable 2FA. Can I use another one like Aegis Authenticator or andOTP? Just don&#039;t like anything from Google on my mobile.Thanks</blockquote>

[QUOTE="HarborFront, post: 1017363, member: 55987"] But those are secured AWS servers and so far there's no news of their servers being breached Regardless, even if the servers are breached, Sticky Password utilizes [URL='https://www.bitcatcha.com/go/sticky-password-security']Zero-Knowledge security[/URL], which throws the ball to the user to remember their Master Password. They won’t keep that password, and data from the vault cannot be read without that master password. Hence, it’s practically impossible for data thieves to read your data, even if they manage to somehow breach Sticky Password’s considerably secure fortresses. [URL unfurl="true"]https://www.stickypassword.com/downloads/Sticky_Password_Security_WhitePaper.pdf?v=3[/URL] [URL unfurl="true"]https://www.bitcatcha.com/best-password-managers/sticky-password-review/[/URL] Quote The storage space and back-end system reside on secure Amazon AWS services (Amazon S3 and Amazon EC2). All stored data is also backed up to the user’s local devices covered by the license. Unquote If you feel cloud is unsafe then can use local WiFi or manual for sync. I'm not sure whether it can backup to your favorite cloud and sync from there The CONS I can find of Sticky Password are 1) Not FOSS 2) No security audit being done 3) No different vaults for different purpose 4) No recovery option if master password is lost 5) No custom field support 6) Need GA on mobile device to enable 2FA Sticky Password says Google Authenticator is needed on mobile device to enable 2FA. Can I use another one like Aegis Authenticator or andOTP? Just don't like anything from Google on my mobile. Thanks [/QUOTE]

Verification