What we can and cannot see

What a sync server never sees

• Your master password or your Secret Key, or any key made from them.
• Anything inside an item: titles, website addresses, usernames, passwords, codes, notes, tags, pictures.
• Your vault’s name.

Sign-in uses a protocol (SRP) in which your password never crosses the network. The server can’t swap one item’s contents for another’s or forge a deletion, and a device that already has an item’s newer version won’t take an older one.

What a sync server does see

• Your email address.
• Each device’s name (for example your Mac’s name followed by “(Mac)”, or “Browser extension”) and when it was last seen.
• IP addresses, and when and how often you sync.
• How many items you have, how big each one is, when each was last changed, and whether it is deleted.

It can also refuse to send you updates, or send you older data, and it can sign a device out. It can’t forge or read items.

Cloudflare, for Remem Cloud

Remem Cloud runs on Cloudflare, which handles the encrypted connection to your device. Cloudflare therefore handles the same things the server sees (email, device names, timing, encrypted items), plus your sign-in tokens. It never sees an item’s content, which is encrypted before it leaves your device. Cloudflare’s request logs for Remem are kept for up to 7 days by Cloudflare.

The website

Your remempass.org account holds your email, waitlist status, invite, consents and email preferences. It sets one cookie, which keeps you signed in. The privacy notice has the full detail.

What encryption can’t protect against

• Malware or someone at your unlocked computer.
• Someone who has both your master password and your Secret Key (or one of your devices).
• A tampered copy of the app.
• Being forced to unlock it. There is no duress password.