Groups

Groups in mSecure allow you to organize your records by a high level category. For instance if you have a personal email address login and your work email login, you can put one in the Personal group and the other in a Business group. Then if you want to just look at your personal records, you can have mSecure just show you records for Personal. If you only have 10-20 records in mSecure you might not need to use this feature. But the more records you have the more this can help. The system has five default groups. Two of these you can rename or delete and the other three are system Groups and can't be modified or removed. Let's cover the system groups.

Unassigned: The unassigned group is where all records go when they don't have a Group. If you updated from version 2 of our software, this is where all your records will start out. This is automatic, you don't have to add them to unassigned and they will be automatically removed from Unassigned when you assign them to a Group. TIP: You can use this Group to determine which of your records haven't yet been assigned to a Group yet

Favorites: A record can't be part of more than one Group. However, you can mark any record as a Favorite as well as having it be part of a Group. This allows quick access to your most commonly used records regardless of which group they are in. So you can blend Personal and Business into Favorites while preserving your organization.

All: As the name implies, this Group will show all your records no matter what the Group is. If you want to view all your records, or you don't want to use the Groups feature, this is the one you want to select.

The other two Groups are just there as they are common ways to organize your records. You can either keep Personal and Business or you can delete/rename them and create your own. We will first cover how to USE groups and then how to MODIFY them.

In Figure 1 can you can see an example of the main view of mSecure. I have two records listed here. The first is a bank account record assigned to the Personal group. The second is a web login for a work email assigned to the Business group. Up in the top corner of the app is the Groups button highlighted in red.



<Figure 1>


Tap on this button and you will be taken to the screen where you can choose which Group to use to filter your main list. You can see an example of this list in Figure 2.



<Figure 2>


You will notice in this view that there are numbers next to the Groups to show how many records belong to each Group. To select a Group, simply tap on the Group name and it will filter the list based on that Group. In Figure 3 we have tapped on the Personal group and it has taken us back to the main view and filtered the list to just the Personal records.



<Figure 3>


You will notice up at the top that we have put a red line under the work Personal in the title. This will tell you which Group you have selected. There is one exception for this, if you select the All group then it won't say anything in the title but "mSecure". In Figure 4 we have gone back to the Groups button and then selected the Business group.



<Figure 4>


You will notice the title has changed and instead of showing our bank account record it is now showing the web login record for my work email. This is the essence of how to use Groups. Now let's look at how to modify the Groups so you can change them to make them flexible for your use. First we are going to tap on the "i" in the bottom corner as in Figure 5.



<Figure 5>


Next we are going to tap on the "Edit Groups List" in the menu as shown in Figure 6.



<Figure 6>


Next we are displayed the list of Groups. In our case we have the default Groups shown as in Figure 7.



<Figure 7>


Now we are going to go change the Business group to be called Work instead. Tap on the line Business and it will slide over to the Groups edit screen where you can edit the Group name shown in Figure 8.



<Figure 8>


Now you can change the name, so I am going to change the name to Work. You will also notice you can tap on the "Delete" button here if you wanted to remove the Group entirely. Any records assigned to a deleted Group will be automatically remove from this Group and moved to the Unassigned group. But for now I am going to keep this Group that I have named Work so I am going to press the Save button. This will return me to the Groups list and now show my change as shown in Figure 9.



<Figure 9>


Now that we have that renamed I am going to add in another Group. We start this by tapping on the + icon in the top corner which is highlighted in red in Figure 10.



<Figure 10>


This now takes us to the Groups creating screen where we simply have just a name field to use. I am going to enter the name of Family and then press the Save button as shown in Figure 11.



<Figure 11>


Now we have three groups shown in the Groups screen. We have our original Personal group and then our modified Business group that is now called Work, and finally the new Family group that I created. You can see this in Figure 12.



<Figure 12>


And finally we are done editing so we can tap on the "Preferences" button in the top left of the screen. This is highlighted in red in Figure 12. This will take us back to the Preferences screen.

Hide Sensitive Data

The Hide Sensitive option in mSecure is an option that will globally decide whether or not fields in mSecure will always show their data or not. Here is an example: You have a web logins record with a username and password. The password field by default is set to be a sensitive field. If the Hide Sensitive option is turned ON then when you first open mSecure you won't see the passwords in the main view or detail view, they will be hidden and require you to tap on them to show them. If Hide Sensitive option is turned OFF then when you first open mSecure you would see all the passwords in the main view and in the detail view without having to tap to show the data. To change this preference, open mSecure and tap on the "i" in the bottom corner of the app as shown in Figure 1


<Figure 1>


Then from the Preferences menu you can toggle this option ON or OFF as shown in Figures 2 and 3


<Figure 2>


 


<Figure 3>


 

Self-Destruct

The Self-Destruct option in mSecure, when set, will destroy the data in mSecure if too many incorrect password attempts are tried. This is a way to protect your data from someone trying to guess your password. To set this feature open mSecure and tap on the "i" in the bottom corner of the app as shown in Figure 1


<Figure 1>


Next you would tap on the "Self-Destruct" option as shown in Figure 2


<Figure 2>


You will now see the options for how many invalid password attempts are allowed before the data is destroyed. The options are either to destroy the data never or after 5, 10 or 20 incorrect passwords. You can change this setting by tapping on any of the selections and this will show a check box next to the one you have selected. Then tap on the Preferences button as shown in Figure 3 and you have successfully setup your Self-Destruct settings.

 


<Figure 3>


 

Auto-Lock

The Auto-Lock feature of mSecure locks the app to protect your data. It will lock after a set amount of time of no activity in the app or after a certain amount of time after leaving the app. For example, if this setting is set to immediate, then the second your phone goes to sleep or the second you leave the app, it will lock mSecure. If you have it set to 3 minutes, then after you have left the app for 3 minutes or after 3 minutes of not using mSecure, even if you are still in the app, it will lock and require you to enter your password again. To adjust the length of time before mSecure locks itself you can follow these steps: Tap on the "i" in the bottom corner of the application as shown in Figure 1


<Figure 1>


Next tap on the Auto-Lock setting shown in Figure 2


<Figure 2>


Next you can select whichever time fits your preference and this will cause a check mark to be shown next to the current option. Then press the Preferences button shown in Figure 3 and you have successfully set the Auto-Lock setting for mSecure.

 


<Figure 3>

 

Change Password

In mSecure the way that you protect your data is by setting a master password to be able to gain access to the data inside of the app. If you have already set a password and want to change it to a new password, you can follow these steps. Open mSecure, enter your existing password and then select the "i" button in the bottom corner of the screen.


<Figure 1>


Next tap on the "Change Password" option as shown in Figure 2.


<Figure 2>


This will bring up the password editing window. Here you will see four fields. Current, New, Confirm and Hint. First enter your existing password you used to open mSecure in the Current password field. Then enter your new password in the New field and then enter it again in the Confirm field. Next you can change your hint to be a valid hint for your new password. Then tap on the "Save" button in the top corner of the window as seen in figure 3.

 


<Figure 3>


Once this is done you can tap on the Done button in the top corner and have you successfully changed your password for mSecure.

 

Set Password

In mSecure the way that you protect your data is by setting a master password to be able to gain access to the data inside of the app. When you first install mSecure it will not have a password set. You will need to set one before our software can encrypt your data. When you first open mSecure you will see a screen like this:


<Figure 1>


Please tap on the "i" in the bottom corner of the screen. It is circled in Figure 1. Once you have done that please tap the "Set Password" option show in Figure 2.


<Figure 2>


This will bring up the password entry window. You will need to enter your password in, then enter it a second time. Then you can enter a hint for your password. This is helpful in case you forget your password. Once those three fields are filled in then tap the "Save" button in the top corner as shown in Figure 3.

 


<Figure 3>


Once this is done you have successfully set your password for mSecure.

 

Security Everywhere Cloud Sync Architecture

Security Everywhere Architecture

White Paper

By David Pfeiffer
mSeven Software


Introduction

mSecure 3.0 introduces the Security Everywhere™ sync architecture that builds on mSecure's security foundation to provide a new level of data security and accessibility. Cloud syncing offers the great advantage of being able to sync anywhere and anytime without firewall restrictions and sync servers, but this convenience cannot come at the expense of data security.

Secure Password Manager

The Security Everywhere™ cloud sync architecture was designed to accomplish three main goals:

  • Sync securely without concern about the security of the cloud system, transmission system or backdoor attacks.
  • Sync anywhere using a general Internet connection without the hassle of firewall and router settings.
  • Sync anytime keeping all mobile and computing devices in sync without a sync server.

These goals were met in the Security Everywhere sync architecture. The Security Everywhere architecture enables mSecure data to be saved on a plethora of cloud systems while satisfying the above goals. To better understand design of any security system, it should be considered in the context of the threat model it mitigates.


Threat Modeling

There are three primary threat or attack models that we are concerned about:

  • Physical device attack (when device is lost or stolen), a subject for another white paper.
  • Sync file attack accessed from the cloud (when using Dropbox or other cloud sync)
  • Man-in-the-middle attack (interception of the sync file on the way to the cloud)

We currently lump the Sync file attack and the man-in-the-middle together because both represent a compromised cloud attack. We mitigate this attack by encrypting the data before it is sent to the cloud server. As you will see in this white paper that a strong password and a solid security system are key to keeping data secure.
 

Sync File Attacks

The sync file attack is an important threat scenario because if the hacker accesses the sync file from the cloud, they can apply significant computing resources to crack the file in a brute-force attack. We recognize that cloud servers can be compromised, so we designed the Security Everywhere architecture not to be dependent on the security of the transmission of the data to the cloud or the security of the cloud, but rather to encrypt the file using a strong sync password with a double encryption and compression system designed to thwart rainbow tables (reverse password look up tables for known data items) and the brute force attack. The system requires the user to create a separate strong sync password for the cloud file. The strong password with our encryption system would require super computer over 100 years to crack the data in a brute force attack.


Multiple Cloud System Support

The Security Everywhere sync architecture was design to operate with multiple cloud systems. Currently mSecure supports the Dropbox Cloud, but others such as iCloud is in development and other cloud systems are under consideration. If you have a cloud system that you would like to see us support, please email us at support@msevensoftware.com.
 

Architecture Specifications
  • 256-bit Blowfish Encryption
  • 256-bit SHA Password hash
  • File Compression
  • Enforcement of Minimum sync password length

Conclusion

The Security Everywhere™ sync architecture is a security system which employs multiple techniques and tools to secure your data. A strong Blowfish encryption system that has not been cracked together with strong passwords can keep your data secure. The Security Everywhere™ sync architecture provides anytime access while providing a solid security model to protect data from brute-force and cloud system attacks.

Sync via Dropbox on Mobile Devices

mSecure Password Manager Tutorial - Sync Data via Dropbox on iOS and Android

This tutorial will review the process of syncing your data via the Dropbox cloud service using an iPhone and an Android device.

 

Setting up Your Dropbox Account

This tutorial will walk you through the steps of setting up the Dropbox sync feature in mSecure. First we'll create a new Dropbox account, then we will go through the process of syncing your data with this new account using the mSecure Password Manager on an iPhone or Android device. Lets get started.

Sync Icon

Now bring up mSecure on your device and tap on the Sync icon in the bottom toolbar. The Sync Setup window will appear.


Sync Setup Screen

Tap on the Dropbox item to start the Dropbox setup process.

NOTE: Normally, the "Sync Setup" screen is found in the Preferences under the "Sync Setup" menu item.

Sync Settings Screen

Turn on the Link Dropbox toggle in iOS, or tap on the Link to Dropbox Account button on an Android device. After you do this, the Dropbox Link screen will be displayed.

Dropbox Linking Page

Tap on the Allow button in the lower right corner of the Dropbox Link screen to authorize mSecure access to your Dropbox account.

Set New Cloud Sync Password

The Cloud Sync Password is a special password shared by all of your devices syncing with the "mSecureSync.mscc" file in your Dropbox's "mSecure" folder. This password is used to encrypt and decrypt your data stored in that file. Each of your mSecure apps must have the same Cloud Sync Password set in their Dropbox sync settings in order for the sync feature to function properly.

Set Existing Cloud Sync Password

Conclusion

As of version 3.5.0, the Dropbox syncing has been automated, so you will not need to manually sync your records. If for some reason you would like to turn that feature off, you can find that in the Sync Settings for Dropbox in the preferences for mSecure. After finishing the set up, mSecure will perform a sync to create the sync file in your Dropbox's "mSecure" folder.

Thank you for viewing this tutorial, and if you have any questions, please contact us at support@msevensoftware.com.

Use Data on Mobile Devices

mSecure Password Manager Tutorial - Using your Data

This tutorial will review the simple process of using your data in mSecure to view your sensitive data, copy an item to the clipboard, share a record, launch a web browser and login to web site. You can either watch the video on this operation or view the screen shots with written narration of the steps.


mSecure Tutorial Video - Using your Data

This video will take you through the process of adding a new record.

mSecure Tutorial Screenshots with Narrative - Using your Data

The following sequence of screen shots and narrative will walk you through the process of adding a record to mSecure Password Manager.

Pages

Subscribe to RSS - iOS