Password Manager store

[ttacox]

How are the remembered passwords stored on the machine are they encrypted?

[RJWaring]

Hi ttacox,

Yes, the passwords are encrypted, and stored within the Registry under the following Location’s.

HKEY_CURRENT_USER\Software\PPM\NotSaved
HKEY_CURRENT_USER\Software\PPM\Saved

[ttacox]

Thank you Sir Richard ruler of the reg.

Do you know the level of encryption at which it is stored at for e.g. AES256 or similar.
I am interested to know if its good practice to say yes to this in a corporate environment.

[RJWaring]

No Problems ttacox,

The encryption method used for PPM is 256-bit AES.

For more information on the PPM and the types of encryption methods used by PowerArchiver download the latest version and search the Help file this should help you make a decision.

My personal experience is that the Encryption for both zip’s,7zip etc used in PA PPM and PAE are more than secure for Corporate Environments as I personally use them all the time. I have yet had a problem with it nor have had anyone who can crack the files.

Obviously, if someone has the resource and determination they can crack most types of encryption.

[spwolf]

@ttacox:

Thank you Sir Richard ruler of the reg.

Do you know the level of encryption at which it is stored at for e.g. AES256 or similar.
I am interested to know if its good practice to say yes to this in a corporate environment.

If actual machines are compromised, then obviously someone can crack the PPM passwords.

So if actual security of machine is in question, obviously you do not want to store passwords locally.

Is it simple? Apsolutly not.

[RJWaring]

Spwolf I agree,

An example I use is to store my passwords on a USB Stick and have a clearing program to run daily on my local machines. Where I work we use biometrics with randamised encryption for user profiles so security is high not as high when I worked in the nuclear section mind!

But the rule of the thumb is dont store passwords locally, Have them encrypted elsewhere and constantly run clearing programs to clear tracks and registry strings and remember to make a long worth while password that would not be easy to guess or hack using standard password hacking programs.

But your rite! its not simple.