#1 Feature Request: The ability to provide pair passwords at program start rather than storing them in the registry

[Anonymous]

Originally created by: chris...@gmail.com

I'd like to have the option to enter a universal password that applies to all the sync pairs that are currently stored in the registry. I'd like for the password to never be saved to disk, and instead remain only in memory. CryptSync should prompt the user on application start up for this password if this option is enabled.

This would allow users with highly sensitive data to better secure their backups.

Thanks!

[Anonymous]

Originally posted by: tortoisesvn

(No comment was entered for this change.)

Labels: -Type-Defect Type-Enhancement

[Anonymous]

Originally posted by: doctore...@gmail.com

make sense .

[Anonymous]

Originally posted by: pierluig...@gmail.com

I agree.
What's the issue if someone copy the key(s) stored in the registry?
Someonce can recover the content of encrypted files?

[Anonymous]

Originally posted by: tortoisesvn

If someone has access to your registry, then they also have access to all your files, including your unencrypted ones.

[Anonymous]

Originally posted by: m3ta...@gmail.com

If you use some container based encryption (ex: truecrypt) locally, it would make sense to ask for the passwords every time you want to decrypt the files.

[Anonymous]

Originally posted by: jake...@gmail.com

This is not always true:

"If someone has access to your registry, then they also have access to all your files, including your unencrypted ones."

I have a folder that becomes encrypted when I logoff or manually lock the folder.  No one but me can get to those files.
When I have the folder unencrypted, that's when CryptSync syncs the folder.

[Anonymous]

Originally posted by: jake...@gmail.com

What this is telling me is that CryptSync leaves a backdoor in the Registry for anyone with Administrator privileges or obtains access to your Registry (malware, virus, trojan, spyware, government, etc).

[Anonymous]

Originally posted by: tortoisesvn

if you have malware, then that can also just read whatever you type on your keyboard and get the password that way.
The same for an admin.
The data is stored encrypted in the registry, so it's not that easy to get it there.

That's not a backdoor. If something or someone has admin rights on your computer, they don't need a backdoor because they're already in the house.