This section deals with security of the Enpass app in your device.
Change Master Password¶
- To change your master password you’d first have to enter the old password and then set (and confirm) the new one.
- Tap Done. You’d be informed about the success of the password change.
If you have enabled sync, the new password for Enpass data would get updated to the cloud during next sync operation. Also, other devices syncing with that cloud will ask for this new password from then on.
Autolocking and Quick Unlock¶
Autolocking protects your data from unauthorized access by locking the Enpass keychain, even when your device’s privacy has been compromized.
By default, you are supposed to enter the master password for unlocking the app. This could be a tedious process, especially when you have to authenticate every autofill activity in the Safari Extenstions with your master password.
Quick unlock features namely, PIN Code and Touch ID, save you from entering your master password every time you want to unlock the app. Users must enable device passcode to use Quick unlock facilities.
The whole behavior of autolocking and quick unlock can be controlled by the following settings:
The default setting is 1 minute of inactivity, which means that Enpass would be auto-locked if left unattended for 1 minute.
You can change it to match your comfort.
Lock on Leaving¶
If the switch is enabled, the app gets locked immediately when sent to background, irrespective of the inactivity-time setting. By default, this switch is turned on.
Master password is set as the default authentication requirement. You can avoid entering your master password altogether by using a 4-10 digit PIN Code.
Now on, you’d be asked for the PIN code to unlock the app. Although, after an unsuccessful attempt you’d have to enter the master password.
When you use PIN Code or Touch ID, your master password gets stored in the iOS keychain. Read more about Enpass security issues with iOS keychain.
- Just tap Change PIN button.
- Enter the new PIN.
Your PIN would be changed.
Enpass supports the built-in Touch ID sensor of iOS devices. That means you can use your fingerprint instead of passwords to unlock the app and its browser extensions.
You can toggle on the switch to enable Touch ID.
Using Touch ID has two major benefits:
- It is quicker than entering password.
- It saves your password from unwanted attention.
When you use PIN Code or Touch ID, your master password would be stored in the iOS keychain. Read more about Enpass security issues with iOS keychain.
While unlocking, after three unsuccessful attempts with Touch ID, the app would ask for your master password to proceed.
You cannot use Touch ID and PIN Code together. If you try toggling both options on, you would be promted with the following message.
When you restarts or reboots your phone, you need to enter the master-password once to unlock the app, even if you’ve enabled the PIN code or Touch ID.
By default, all sensitive fields are concealed by bullets.
When you copy any data from Enpass, it gets stored on your device’s clipboard. You can choose when to clear this data from clipboard. By default, it is set to After 30 seconds.