Auto-Lock

mSecure Password Manager for iOS


User's Guide - Auto-Lock

The Auto-Lock feature of mSecure locks the app to protect your data. It will lock after a set amount of time of no activity in the app or after a certain amount of time after leaving the app. For example, if this setting is set to immediate, then the second your phone goes to sleep or the second you leave the app, it will lock mSecure. If you have it set to 3 minutes, then after you have left the app for 3 minutes or after 3 minutes of not using mSecure, even if you are still in the app, it will lock and require you to enter your password again. To adjust the length of time before mSecure locks itself you can follow these steps: Tap on the "i" in the bottom corner of the application as shown in Figure 1


<Figure 1>


Next tap on the Auto-Lock setting shown in Figure 2


<Figure 2>


Next you can select whichever time fits your preference and this will cause a check mark to be shown next to the current option. Then press the Preferences button shown in Figure 3 and you have successfully set the Auto-Lock setting for mSecure.

 


<Figure 3>

 

Change Password

mSecure Password Manager for iOS


User's Guide - Change Password

In mSecure the way that you protect your data is by setting a master password to be able to gain access to the data inside of the app. If you have already set a password and want to change it to a new password, you can follow these steps. Open mSecure, enter your existing password and then select the "i" button in the bottom corner of the screen.


<Figure 1>


Next tap on the "Change Password" option as shown in Figure 2.


<Figure 2>


This will bring up the password editing window. Here you will see four fields. Current, New, Confirm and Hint. First enter your existing password you used to open mSecure in the Current password field. Then enter your new password in the New field and then enter it again in the Confirm field. Next you can change your hint to be a valid hint for your new password. Then tap on the "Save" button in the top corner of the window as seen in figure 3.

 


<Figure 3>


Once this is done you can tap on the Done button in the top corner and have you successfully changed your password for mSecure.

 

Set Password

Back To User Guide


In mSecure the way that you protect your data is by setting a master password to be able to gain access to the data inside of the app. When you first install mSecure it will not have a password set. You will need to set one before our software can encrypt your data. When you first open mSecure you will see a screen like this:


<Figure 1>


Please tap on the "i" in the bottom corner of the screen. It is circled in Figure 1. Once you have done that please tap the "Set Password" option show in Figure 2.


<Figure 2>


This will bring up the password entry window. You will need to enter your password in, then enter it a second time. Then you can enter a hint for your password. This is helpful in case you forget your password. Once those three fields are filled in then tap the "Save" button in the top corner as shown in Figure 3.

 


<Figure 3>


Once this is done you have successfully set your password for mSecure.

 

Security Everywhere Cloud Sync Architecture

Security Everywhere Architecture

White Paper

By David Pfeiffer
mSeven Software


Introduction

mSecure 3.0 introduces the Security Everywhere™ sync architecture that builds on mSecure's security foundation to provide a new level of data security and accessibility. Cloud syncing offers the great advantage of being able to sync anywhere and anytime without firewall restrictions and sync servers, but this convenience cannot come at the expense of data security.

Secure Password Manager

The Security Everywhere™ cloud sync architecture was designed to accomplish three main goals:

  • Sync securely without concern about the security of the cloud system, transmission system or backdoor attacks.
  • Sync anywhere using a general Internet connection without the hassle of firewall and router settings.
  • Sync anytime keeping all mobile and computing devices in sync without a sync server.

These goals were met in the Security Everywhere sync architecture. The Security Everywhere architecture enables mSecure data to be saved on a plethora of cloud systems while satisfying the above goals. To better understand design of any security system, it should be considered in the context of the threat model it mitigates.


Threat Modeling

There are three primary threat or attack models that we are concerned about:

  • Physical device attack (when device is lost or stolen), a subject for another white paper.
  • Sync file attack accessed from the cloud (when using Dropbox or other cloud sync)
  • Man-in-the-middle attack (interception of the sync file on the way to the cloud)

We currently lump the Sync file attack and the man-in-the-middle together because both represent a compromised cloud attack. We mitigate this attack by encrypting the data before it is sent to the cloud server. As you will see in this white paper that a strong password and a solid security system are key to keeping data secure.
 

Sync File Attacks

The sync file attack is an important threat scenario because if the hacker accesses the sync file from the cloud, they can apply significant computing resources to crack the file in a brute-force attack. We recognize that cloud servers can be compromised, so we designed the Security Everywhere architecture not to be dependent on the security of the transmission of the data to the cloud or the security of the cloud, but rather to encrypt the file using a strong sync password with a double encryption and compression system designed to thwart rainbow tables (reverse password look up tables for known data items) and the brute force attack. The system requires the user to create a separate strong sync password for the cloud file. The strong password with our encryption system would require super computer over 100 years to crack the data in a brute force attack.


Multiple Cloud System Support

The Security Everywhere sync architecture was design to operate with multiple cloud systems. Currently mSecure supports the Dropbox Cloud, but others such as iCloud is in development and other cloud systems are under consideration. If you have a cloud system that you would like to see us support, please email us at support@msevensoftware.com.
 

Architecture Specifications
  • 256-bit Blowfish Encryption
  • 256-bit SHA Password hash
  • File Compression
  • Enforcement of Minimum sync password length

Conclusion

The Security Everywhere™ sync architecture is a security system which employs multiple techniques and tools to secure your data. A strong Blowfish encryption system that has not been cracked together with strong passwords can keep your data secure. The Security Everywhere™ sync architecture provides anytime access while providing a solid security model to protect data from brute-force and cloud system attacks.

Sync via Dropbox on Mobile Devices

mSecure Password Manager Tutorial - Sync Data via Dropbox on iOS and Android

This tutorial will review the process of syncing your data via the Dropbox cloud service using an iPhone and an Android device.

 

Setting up Your Dropbox Account

This tutorial will walk you through the steps of setting up the Dropbox sync feature in mSecure. First we'll create a new Dropbox account, then we will go through the process of syncing your data with this new account using the mSecure Password Manager on an iPhone or Android device. Lets get started.

Sync Icon

Now bring up mSecure on your device and tap on the Sync icon in the bottom toolbar. The Sync Setup window will appear.


Sync Setup Screen

Tap on the Dropbox item to start the Dropbox setup process.

NOTE: Normally, the "Sync Setup" screen is found in the Preferences under the "Sync Setup" menu item.

Sync Settings Screen

Turn on the Link Dropbox toggle in iOS, or tap on the Link to Dropbox Account button on an Android device. After you do this, the Dropbox Link screen will be displayed.

Dropbox Linking Page

Tap on the Allow button in the lower right corner of the Dropbox Link screen to authorize mSecure access to your Dropbox account.

Set New Cloud Sync Password

The Cloud Sync Password is special password shared by all of your devices syncing with the "mSecureSync.mscc" file in your Dropbox's "mSecure" folder. This password is used to encrypt and decrypt your data stored in that file, and each of your mSecure apps must have the same Cloud Sync Password set in their Dropbox settings in order for the sync feature to function properly.

Set New Cloud Sync Password (cont.)

In the iOS version, you will be taken to the Confirm screen. Enter your cloud sync password one more time on that screen, then you can enter your Hint for that password.

In the Android version, there is just one screen for setting your cloud sync password. After entering and confirming your password, you can enter a Hint for that passwrod.

Set Existing Cloud Sync Password

Conclusion

As of version 3.5.0, the Dropbox syncing has been automated, so you will not need to manually sync your records. If for some reason you would like to turn that feature off, you can find that in the Sync Settings for Dropbox in the preferences for mSecure. After finishing the set up, mSecure will perform a sync to create the sync file in your Dropbox's "mSecure" folder.

Thank you for viewing this tutorial, and if you have any questions, please contact us at support@msevensoftware.com.

Use Data on Mobile Devices

mSecure Password Manager Tutorial - Using your Data

This tutorial will review the simple process of using your data in mSecure to view your sensitive data, copy an item to the clipboard, share a record, launch a web browser and login to web site. You can either watch the video on this operation or view the screen shots with written narration of the steps.


mSecure Tutorial Video - Using your Data

This video will take you through the process of adding a new record.

mSecure Tutorial Screenshots with Narrative - Using your Data

The following sequence of screen shots and narrative will walk you through the process of adding a record to mSecure Password Manager.

Add Record on Mobile Devices

mSecure Password Manager Tutorial - Adding a Record

This tutorial will review the simple process of adding a record to mSecure. You can either watch the video on this operation or view the screen shots with written narration of the steps.


mSecure Tutorial Video - Adding a Record

This video will take you through the process of adding a new record.

mSecure Tutorial Screenshots with Narrative - Adding a Record

The following sequence of screen shots and narrative will walk you through the process of adding a record to mSecure Password Manager.

Pages

Subscribe to RSS - iOS