ቅጽበታዊ ገጽ እይታዎች

መግለጫ

The Webpass password manager provides extensive control over the creation and granting of access. Webpass has no access to your passwords Our service is designed so that all confidential data (passwords and notes) is transmitted to servers and stored in the browser's local storage exclusively in encrypted form, preventing Webpass and third parties from accessing the data on the server. Your master password is the encryption key and is never left exposed during operation. Be careful! The security of this method means that if you lose both your primary and backup master passwords, we will not be able to recover your data. Unauthorized access risk notifications The security system monitors password confidentiality and promptly reports cases where an account password needs to be changed, such as when an employee has lost access to an account or retired. AES-256 and RSA data encryption Confidential data is encrypted using the AES-256 algorithm, which governments in various countries have adopted as an encryption standard. The algorithm's key is derived by converting the master password into a cryptographic 256-bit password. Data is transferred between users using RSA; its mathematical functions generate two keys for the system: a public key and a private key. The public key encrypts transmitted data so that only someone who knows the private key can decrypt it. The private key is known only to the recipient, and this is the key feature of asymmetric encryption. The Telegram application protects user data in the same way. Two-factor authentication You can add extra security to your Webpass account with two-factor authentication. The Google Authenticator app generates an authorization key on the user's smartphone, and the key remains valid for 30 seconds. Thus, even if someone knows the master password, they cannot sign in to the Webpass account without access to the smartphone. Setting password complexity Users tend to use similar and overly simple passwords. You can set a minimum permitted password complexity and prevent the same password from being used more than once. Password security analysis Password complexity determines how long an attacker would need to crack it. It may take an attacker tens of thousands of years to guess a strong password. The system will tell you how secure a password is. Managing employee access to passwords You can choose the desired level of employee access to any account. Minimum level: viewing without entering a password. The employee sees the account in the account list but cannot access the password without an approved request. Standard level: the user can view the account and copy its password but cannot change it. Administrator level: the user can edit and delete the account and grant access to other users. Full access: the user can delegate administrator access to other users. Monitoring password currency Security rules recommend changing passwords periodically. You can specify how often passwords need to be updated. The system then tracks their currency and notifies administrators when a password needs to be changed. Change history Webpass keeps detailed records of who viewed, edited or granted access to accounts and when. Protection against guessing a Webpass account password If attackers attempt to crack a Webpass account password, the security system tracks the attempts, blocks authorization and immediately notifies the account owner.