This is a staging forum for AgileBits, not an official support forum. Visit http://discussions.agilebits.com instead.
Feature Request: Self-destruct (i.e., delete database after wrong password input)
Comments
-
Good question!
Suggestions like this come up occasionally, and I certainly see why people might find it an attractive idea. But when we analyze these from a security perspective, we find that such a feature might provide the user with an impression of additional security without actually increasing genuine security.
The need to having good backups in a case like this is obviously important. Accidental or malicious destruction of someone's data with such a mechanism is possible. Part of data security is providing "[url="http://blog.agilebits.com/2011/04/keeping-your-data-at-your-finger-tips-part-i/"]data availability[/url]." We know how important your 1Password data is to you, and we want to make sure that you always have access to it. At the same time, the existence of the backups mean that such a "self destruct" mechanism would only be getting at one of several copies anyway.
Self-destruct mechanisms are also easily defeated unless running on a very tightly controlled operating system. (So these would be possible on iOS, but not on the Mac or Windows). The easiest way to defeat such a mechanism is to write a separate program that doesn't use 1Password at all but still tries to break into your 1Password data.
You also shouldn't underestimate the strength of the encryption of your data. If your master password is reasonably okay, the time it would take to automatically guess and test enough master passwords to come close to getting yours is literally astronomical. That is, we are talking about measuring the time in terms of the age of the universe.
You might be interested to learn that Apple's own Remote Wipe feature in iOS 4 actually just destroys the unique hardware encryption key that is built into every iOS device. It does not physically remove the data, it just removes any chance of ever decrypting it.
It's great that you are thinking about this issues and what would make your data more secure. I love talking about these kind of things. In this particular case what seems initially appealing doesn't hold up under under closer examination, but that shouldn't discourage you from thinking about these things and posing suggestions.
Cheers,Flag 0 -
[quote name='khad' timestamp='1324158055' post='55755']
At the same time, the existence of the backups mean that such a "self destruct" mechanism would only be getting at one of several copies anyway.
[/quote]
The "self destruct" mechanism must be include the backups.
I think, "self destruct" is good for iPhone/iPad or MacBooks. Not for a stationary Mac at home with an connected backup drive (Time Maschine).Flag 0 -
[quote name='khad' timestamp='1324351551' post='55868']
This is already provided in iOS for iPhone, iPod touch, and iPad:
[url="http://osxdaily.com/2010/08/12/run-iphone-in-james-bond-mode-set-your-iphone-to-self-destruct-and-erase-all-data-after-failed-password-attempts/"]http://osxdaily.com/...sword-attempts/[/url]
[/quote]
But not on 1Password for MacOS X. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/skype_smile.png' class='bbc_emoticon' alt=':-)' />Flag 0 -
Ah. I missed part of your last sentence. I though you were saying you weren't looking for this feature on the Mac but only for iOS. You actually made a distinction between portable Macs and desktop Macs. I see that now.
Again, thanks for the feedback. We appreciate knowing that you are interested in this and will take that under advisement. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />
Cheers,Flag 0
