Encryption is very important to protect confidential data, but with the every day growing computer power the brute force attack can be successful done even by a hacker with a home computer.

In addition, any encryption software may have bugs that an attacker will exploit to facilitate the access to the confidential data. In this video a security expert shows how to exploit a bug and by-pass the encryption of a very popular in just 2 minutes:
https://www.youtube.com/watch?v=YL4yQRw69oo

And more, Edward Snowden made public that governments can copy any data on Android, iOS, Windows Phone and possibly others, and log the keyboard, including your passwords.

That is a difficult scenario, encryption alone is no longer an option.

The answer is "air gap". In addition to encrypt, the confidential data should be stored in a media that is not permanently attached to any device, creating the so called "air gap".

The encrypted data base may be stored in a removable SDCard or a memory stick (pen drive) that can be easily connected to devices with USB-host feature.

Surprisingly, no encryption software allows the air gap functionality, and some even "protect" the passwords keeping it fully exposed on cloud servers that are well know by sell the users data to governments and for advertising. Is the protection for dumbs.

Is very easy to implement air gap on Safeincloud:

1. Give the user the possibility to choose where the encrypted database is stored (SDCard, USB memory stick)




2. Give the user to open the encrypted database from any location after the APP is open




3. Do not create problems for the user to sync the database with the file stored in a computer by using third part sync software, like Goodsync. Keep the encrypted database consistent among different platforms, the file should be the same for computer and device, without any conversion (maybe already is like this).




4. Take a step ahead, give the use the option to include an additional protection layer, allowing to store the encrypted database inside an encrypted container, like a Bestcrypt or TrueCrypt container (there are some Android APP compatible with such containers). I call this cross-protection.

For the users that are reading this: vote one my suggestion and help yourself.

Sukhoi
Expert on data security

I'm loving the newest version with its built-in browser. But are there plans to choose the external browser the app accesses? I constantly use Firefox but you've configured the app to work with Chrome. Smart, because everyone has it. But it's not the safest so I've disabled it. Problem is, your internal browser doesn't work with secure websites. So, I'd love to choose something other than Chrome. Let me know or part a response to say if this is in the works. Thanks sooo much. You've got a wickedly great app. Make that we've got a wickedly great app ;-) Cheers