iliko Wrote:Please do not tell me that resetting password is not possible due to security and encryption you have on them. Ther are many similar systems also applying encryption. I liked the system that is why I care.
This is the case -- we REALLY don't actually have your password/encryption key -- we can't reset your password -- there is no similar system out there that is safe and can do this. We've been giving this a lot of thought and we can safely do something that's saved on your local computer combined with some data on our side to allow a reset but it's a large technical challenge to run this service with zero knowledge of your sensitive data.
Thanks for reply. You can use same technology as Fmarks does. See the quote from thier statement:
Encryption and Security
To encrypt your passwords, Xmarks uses the current state of the art AES 256-bit encryption algorithm. AES is a United States government standard and is recommended by National Security Adminstration (NSA) for encrypting classified information. See the AES Wikipedia entry for more details.
AES works by taking data that needs to be encrypted along with a secret PIN of your choosing, and then produces an encrypted result. It is strong enough to virtually guarantee that your encrypted data cannot be decrypted by a third-party, not even Xmarks. The biggest point of weakness is in the strength of the secret PIN that you choose. Xmarks recommends that you choose a PIN that is difficult to guess and contains a wide variety of different characters and numbers.
It works similar to public/private key principle. I can not beliwve it can not be done. All online shops, most online banks, free email systems who are also using encryption have ability to reset your password but you do not. At lest you should make stronger password reminder. It should reveal send me a link to reset (not to see as it is not possible)password ONLY if I succesfully answered several reminder questions.
Anyway it is just a feature request which would be nice to have.