Your data is fully encrypted with 256-bit AES with 24,000 rounds of PBKDF2 using the peer-reviewed and open-source encryption engine SQLCipher, providing you with advanced protection against brute force and side channel attacks.
The key that encrypts your data is derived from your Master Password. Your master password is only recorded in your mind. There is no other record of master password (with which your data is encrypted) or its derivative anywhere in universe - not on your device (exception in case of Touch ID), not with us and not on any cloud. If you forget your master password, there is no way to recover your data.
Enpass is designed to work locally even without internet connection. To use Enpass, you don't need to sign-up with us. Your data always remains on your device and never leave it until you choose it so by syncing through any of your cloud account.
Optionally, you can sync your data (AES-256 encrypted) across multiple devices seamlessly through any of supported clouds such as iCloud (Apple devices only), Dropbox, Google Drive, OneDrive and Box. Your data is always transmitted in encrypted format. Encryption and decryption always happen locally on the device.
We do not host your Enpass data on our servers. So, no signup is required with us. Your data is only stored on your device. If you prefer to sync your data between devices, you can use your preferred storage cloud, such as iCloud, Dropbox, Google Drive, OneDrive, Box etc.
100% of your data is encrypted with Enpass everywhere. You can open data file inside a binary editor and see it yourself. All you will see is nonsense, gibberish data ( encrypted with AES 256).
If you forget your master password nothing can be done to recover it. There are no such backdoors and options to get back or reset your password as there is no record of it anywhere other than your mind. This is the only way we can make the data inaccessible to anyone except you.
Your cloud always contains a copy of same encrypted data as on your device. We download the whole encrypted copy and decrypt it locally on your device for real sync operation to merge changes. Afterwards we upload the encrypted data on cloud. In a nutshell, your cloud is only a storage medium and no security related operation ( encryption or decryption ) is actually performed there. All such operations are performed locally on your device.
Your data is encrypted using the same standard as on your device, i.e. AES-256 with 24,000 rounds of PBKDF2 using SQLCipher engine. Even if an attacker gains access to your Enpass data file, it is unusable for him until your master password itself is compromised; otherwise it will take him years to crack and peep through your data.
Your Enpass data can only be decrypted by your master password. Please read more here to learn how we have used Windows Hello to unlock Enpass with best possible security.
Your Enpass data can only be decrypted by your master password. Please read more here to learn how we have used Fingerprint to unlock Enpass with best possible security.
Your Enpass data can only be decrypted by your master password. Please read more here to learn how we have used Touch ID to unlock Enpass with best possible security.
Please see this FAQ.