Follow
I was just shown this PasswordPocket "offline password manager" and I'm trying to figure out what to make of it.
They say their whitepaper is forthcoming, so I wouldn't put any trust in it until knowledgeable #infosec people have reviewed that. The information in the Kickstarter seems pretty vague to me (what are the details of the E2EE they keep mentioning, what parameters are used with PBKDF2, what mode is AES256 being used in, etc.) .
I guess I'm also not convinced it is much better than using KeePass and a thumb drive, since it sounds like in general as soon as you use the backup function with a device it will have access to both the master password (in memory) and the encrypted vault. I'm definitely interested in what others think.
