Reply
Visitor
mathieudeom
Posts: 2
Registered: ‎04-26-2012

Identity safe not so safe ?

[ Edited ]

Hello,

 

First, I'm quite satisfied with this new product ;)

 

But, for me there's quite a big lack of security with exporting stuff.

 

When your vault is open, even if you ask vault password before filling out any forms, you can export all your account password in plain text with all unencrypted passords...

 

Don't you think exporting all accounts unencrypted like this should require at least vault password ?

 

Best Regards

Symantec Employee
prasanna_a
Posts: 1,035
Registered: ‎05-09-2011

Re: Identity safe not so safe ?

Hi,

 

Thanks for your feedback about the product.

 

Now coming to your query with regards to the security when exporting the data,currently we don't have any security check in place for exporting the data from your open vault. This is the behavior by design in our other main products as well. But we make sure that none can break into the vault by having a two level of protection i.e. logging to NA and logging to vault. You can post this as a suggestion in our product suggestion area and we would see what best we can do.

 

Regards,

Prasanna

Tony_Weiss
Posts: 7,398
Topics: 505
Kudos: 1,457
Solutions: 280
Registered: ‎04-07-2008

Re: Identity safe not so safe ?

That's a great suggestion. Thanks for your feedback.

Tony Weiss
Norton Forums Global Community Manager
Symantec Corporation
mp3jo
Posts: 1,459
Topics: 269
Kudos: 91
Solutions: 113
Registered: ‎06-27-2009

Re: Identity safe not so safe ?

[ Edited ]

Another thing is, when your vault is open, even if you ask vault password before filling out any forms, you can view / edit / change all your account passwords in ID Safe menu with all unencrypted passwords.

Cheers,
Jo

--- N360 v6.4 on german 64 bit win7, IE9 ---