How is it secure when I enter a password once and it's 'trust' from then on?

Nickargenta

Does anyone understand this. I downloaded app on my Android and set a simple password. Then on my laptop I downloaded the app and encrypted a couple of Google Drive folders. Then decided to use a much stronger password which worked fine. When I opened my Android I had access to all my encrypted files.....how is that secure? Apparently, when the system assumes 'I' am the account owner, The system already is open on any device I own.

If I were the government, I would go to the nearest phone store and request a new device while impersonating me, because the system will never, ever ask for the password again once you set up an account.

Philipp

Hi Nickargenta,

if you reset / change your account, you will lose access to ALL your already encrypted files and you will be removed from all groups.

You also have to sign in again with the new password on all devices.

Are you sure you are using the same account?

Best regards,
Philipp

Edit:

I just thought about it and I guess you haven't encrypted any files yet.

Please find our support pages here: https://support.boxcryptor.com/

Robert

Hello,

When you sign in on a device with your password, all (encrypted) keys will be downloaded to your device and decrypted with your password. While the app is running, the decrypted private key is kept in memory and can be used to decrypt your files.

Changing your password on a device does not affect any other device you're currently logged in. If you want to explicitly unlink all other devices from your account, you can do that here:

https://www.boxcryptor.com/app/device/overview

Best regards,
Robert

PS: On any new device you always need the latest password to sign in to your Boxcryptor account and decrypt your data.

Robert

Please also make sure that files have really been encrypted in the first place - Boxcryptor offers you to work with encrypted and plaintext files at the same time. And of course if a file is not encrypted, you do not need your Boxcryptor account to decrypt it.