Encrypted passwords on share isn't working

kclarke2000 · June 2016

I used to share passwords via text message and now they are not showing up as encrypted but as plain text. How do I get that feature back?

Ben · June 2016

Hi @kclarke2000,

The previous iteration of item sharing was only obfuscated. It didn't provide any real security. Sharing via SMS was not (and is not) a secure method.

We've discussed this here:
https://discussions.agilebits.com/discussion/61059/only-sharing-options-are-airdrop-or-print-email-message-options-restored-ios-v6-4-2-mac-v6-3-1/p1

Unfortunately the previous implementation led folks to believe that it was secure, and for that reason had to be re-designed. It now appropriately shows a warning on each use, and the text appears in clear un-obfuscated form.

Thanks!

Ben

PJ1 · June 2016

Hi @kclarke2000

I don't know how sensitive the information you want to send is in relation to how much effort you want to put into it but there are a couple of solutions I use as a work round.

Requirements:
You will need something like a Protonmail or Tutanota email account which should be free or very cheap, and those you are sending to would be best to have a similar account to receive through the email application, or you can generate a link with a shared password that can be opened in a browser securely.

Both apps are available through an online account or smartphone app.

For SMS type messages use something like Cyphr from Goldenfrog who produce VyprVPN and, once logged into the app via browser or smartphone, 'invite' any contacts you wish to share with to open a free account.

Again, available through an online account or smartphone app.

Procedure:
1. Go into 1P and hit Share and use the Copy option
2. Start a new Tutanota or Protonmail message, paste the info and send. Set a password if recipient is not a member for use in a browser
3. For SMS, open Cyphr, paste and send. If recipient is not a member, they must be invited to join first so they can receive messages

Drawbacks:
As far as I have found, the link generated to allow you to include the info directly into 1P will not work with the email options, so any details would need to be copied or selected and pasted into a new login.
Cyphr is limited to 1,000 characters, so the generated link will push this over the top. The link will need to be deleted from the message to enable the other details to be sent.
Any recipients will either have to be a member (only option in Cyphr) or will only be able to open a password protected link in a browser and copy details from there.

If you just want to send a password and a few other details to someone, then any of the above will work perfectly and be very, very secure.

Best
Paul