SplashID Safe Password Manager vs The Vault

SplashID is the world's most trusted password storage system. For over 12 years, over one million users have kept their passwords safe with SplashID - and now it gets even better with an all-new version. Think of SplashID as your personal vault or digital wallet on the iPhone or iPad. You can store and lock sensitive information - not just usernames and passwords but credit card data, account numbers, registration codes, prescriptions, and much more. Keeping your usernames, passwords, and bank account numbers in your head, in a Word or Excel file, or written on a piece of paper is unsafe. Passwords can be forgotten; laptops can be lost. With SplashID, your data is easily and quickly accessible, reliably stored, and - most importantly - secure. SplashID gives you the following features: - Access: Free, native, secure apps for mobile, desktop, web, and browser - Choice of sync and storage: You decide how to store and sync your records with convenient cloud sync, local network Wi-Fi sync, or on-device storage - Touch ID login - Customizable record types and categories to keep your information organized - Photo capture feature to quickly and easily store credit card information - You can upload photos, documents, and add notes to any record for reference - Protection with 256-bit encryption and 2-factor authentication - Secure sharing: Safely share your records with other SplashID users or even those who don’t use SplashID - Automatic SplashID Backup service to ensure data never gets lost - Security dashboard provides you with usage statistics and tools to monitor and fix weak, reused, and old passwords - Web autofill saves typing in usernames, passwords, and delivers the correct address from the secure data vault every time to prevent phishing - SplashID extension is available for autofill in Safari Lock your personal information up in a state-of-the-art data saver and feel comfortable knowing that at any time you can access private information safely. No other password app delivers SplashID's combination of features, reliability, and security. Compare SplashID to others: https://www.splashid.com/best-password-manager The app is free to use with basic record storage functionality. A one-year subscription to SplashID Pro gives you many additional features like sync across devices, security dashboard and automated backup for just $19.99. You can purchase the subscription from the app store and it will be charged to your iTunes account. It will auto-renew at the end of the year. Use your iTunes account to cancel the subscription anytime up to 24 hours before the renewal. You can read about our privacy policy at http://www.splashdata.com/about/privacy.htm You can read about our terms of service at https://www.splashid.com/terms-of-service

◆ NO ads, NO tracking, NO subscriptions - Free with optional one-time charges ◆ Do you... ... have trouble remembering tens or hundreds of online passwords? ... write passwords down somewhere, even though you know this is not the safest thing to do? ... use the same ("cleverly" modified) password in multiple places, instead of using properly randomized passwords that offer the best security? ... sometimes wish you had a photo of a creditcard, passport or other document handy? ... want to securely store lots of other confidential information, photos, animated GIFs, office documents, you name it? ... want all this to be secure, but still very simple to use? Then ◆The Vault◆ is for you! The Vault provides straightforward, easy to use, secure storage for all your documents and other data, such as passwords, login credentials and any other confidential information. It can securely store any number of documents, images, screenshots or photos along with your confidential information. * 256-bit AES encryption * While storage and access is simple, The Vault uses rock-solid, industry standard encryption. [technical details below] ◆ ◆ ◆ WHY IS IT BETTER ? ◆ ◆ ◆ ▸ See all features: bit.ly/TheVault-Features ▸ The Vault is very simple to use, yet it employs industry-standard encryption to keep your data safe. (Some other - payed - apps do too, but some apps advertised as "secure" really do not, and for example save your data using a simple base-64 encoding: your information looks scrambled, but is as readable as plain text when you know how). ▸ The Vault will - never - show ad banners! We hate them too. ▸ The Vault stores information on * your * device. Not on some server somewhere on the net. ▸ Securely storing information is as simple as entering free text! ▸ The Vault can securely store photos and pictures from your camera or photo library; for example a copy of your passport, credit card, or just the serial numbers of some equipment you own. Anything. ▸ The Vault can securely store - and play - animated GIFs. ▸ The Vault can securely store *any* office or other document. ▸ Many secured documents can be viewed directly from The Vault, including PDFs, Keynote, Numbers, Pages, Powerpoint, Excel and Word files. ▸ You can optionally import data exported from your previous password app (or any other source that can provide the data). ▸ Automatically and securely backups your data! ◆ ◆ ◆ TECHNICAL DETAILS ◆ ◆ ◆ This is the part that matters. This is the part that is hard to get right. This is the part that makes the difference between actual security and insecurity. Claiming “military-grade” (or “industry standard” ;-) encryption is meaningless. Even claiming “256-bit AES encryption”, in itself is not very meaningful. Example: Claiming “military-grade” encryption and subsequently simply hashing a master passcode - e.g. using SHA, or MD5 is NOT good. What ís good is to use a proper key derivation algorithm such as PBKDF2, scrypt or bcrypt. Another example: AES is better than older algorithms such as Blowfish, Twofish or 3DES. But even for AES: an app that does not combine encryption with authentication... is doing it wrong. Currently there is some consensus that the best construct is to first encrypt a message and then calculate a message-authentication code, instead of the other way around. These things matter. ◆ ◆ ◆ The Vault uses PBKDF2 key derivation with an HMAC-SHA512 PRF, and HMAC-SHA256 Encrypt-then-MAC authenticated 256-bit AES encryption, using CommonCrypto functionality only. All cipher and MAC worker keys, as well as all salts and IVs, are purely random data. Keys and IVs are never reused. Each singular piece of data is encrypted with a unique random encryption key, and authenticated with a unique random HMAC key. Your Master Passcode is never stored; and neither are the derived cipher keys. ◆ ◆ ◆ THE ONLY THING ●YOU● HAVE TO DO? Choose a long master passcode. Make it long, and make it random!