ArtOfCode- / contactbook

AWS/EC2 deployed contact book app
Apache License 2.0
2 stars 0 forks source link

Enable password recovery #8

Open ArtOfCode- opened 8 years ago

ArtOfCode- commented 8 years ago

This one has a bone in it.

We need some way to recover a forgotten password. However, given that encryption keys are based on passwords, if a password is lost then the data is permanently inaccessible.

Figure out a way to get round that (see: Proton Mail). Consider two passwords? Auto-generate one?

ArtOfCode- commented 8 years ago

Refs:

Information Security has drawn attention to the fact that many cloud providers don't allow password recovery and data recovery - forgot your password? Bye bye data!