search

mooltipass / moolticute

Mooltipass crossplatform daemon/tools
GNU General Public License v3.0
141 stars 66 forks source link

Export All Databases to File Without Need For Cards #1208

Open bitcog opened 5 months ago

bitcog commented 5 months ago

Missing feature

Background

I share my Mooltipass device with a number of non-technical family members who do not make regular backups of their password database. I would like to do the backing-up of their password database for them but the Moolticute application requires a user's card to be present/unlocked and (as I understand) only backs-up the password database of the user whose card is currently present/unlocked.

Feature

Allow the entire password database (for all users) to be exported in one operation, even if no user card is present.

Since the export is encrypted with AES-256, I see no security weakness here.

Justification

One family member (the diligent, technical person) can perform the password database backups for all other family members.

Workarounds

I've found a not-so-secure workaround which is to have copies of all the user's cards, all with their PINs set to something that I know, store these copies in a safe place and get them out when I want to make backups. Make the password database exports one-by-one.

limpkin commented 5 months ago

that's an interesting request... how would we identify which DB we'd like to export when no card is inserted though?

bitcog commented 5 months ago

how would we identify which DB we'd like to export when no card is inserted though?

With this feature, all DBs will be exported with one button click. I don't know which of these options would be possible/desirable: