Password protection is bugged?

ltrojak

Dear Boxcryptor Team,

I have noticed a very strange issue with the desktop application. I am able to access decrypted files without providing my password, even though the checkbox "Password Protection" is checked in the settings.

Reproduction steps:
1. Exit Boxcryptor desktop application
2. Double-click any encrypted file
3. Close pop-up window when prompted for password
4. Repeat steps 2,3 several times (usually around 3)
5. Suddenly the application just starts and I didn't need to enter the password at all ?!

I am not sure whether it's intended or not, but this doesn't seem very safe to me. I do not want some random people using my Windows account to also get free acccess to my encrypted files.

PS: Tested on both local and global account, I have Windows 10 and the latest app version

Yasmin

Hello ltrojak,

as mentioned in my email answer, I wasn't able to reproduce the issue.

If possible, please try to capture this in a small video and send it to us.

Thanks in advance!

Best regards,
Yasmin

ltrojak

I decided to try reproducing this bug on another device. I used my workplace PC running Windows 8. And it happened again! This time, however, I needed A LOT more attempts to break it, comparing to the first device. I have recorded everything, please have a look:

https://1drv.ms/v/s!Ag__hH8lgpkEiLUfR0IIsH-t-vmeQw

I managed to break it at 4:24.

Yasmin

Hello ltojak,

thanks a lot for the video and your feedback, very appreciated!

Indeed, we were able to reproduce it now and we are working on it.
The issue will be fixed asap and will be available in the next version.

Best regards,
Yasmin

SteBae

Does today's update to version 2.23.726 fix this bug? The changelog is not conclusive.

Christian

Hello SteBae,

yes, this issue has been fixed in the latest release.

Best regards,
Christian

SteBae

Thanks for the confirmation Christian.