Security Problem : Axcrypt do not ask for password in offline mode

[Mathieu]

Hi,

When i use for the first time Axcrypt, i create an account etc. Axcrypt ask for my account password only for online mode (it is logical i agree)

But, if i cancel login and use Axcrypt in offline mode, i can encrypt and decrypt all files without asking for a password.

So, in conclusion, if my laptop is stolen, if the thief can login into my windows account, he can decrypt all the files in “Mes Documents” without need to enter a password.

It is right ?

[Mathieu]

Forget my post (and delete it) i make a big mistake in my test, i do not see that i was online mode. I redo test and for decrypt Axcrypt ask for the password.

Very sorry for the noise.

[SvanteBlocked]

:-)

Svante

[jacksonjohn]

You’re correct; if Axcrypt allows offline access without a password, it poses a security risk if your laptop is stolen and the thief gains access to your Windows account. It would be safer if offline mode required authentication. Speaking of security and awareness, have you ever tried iq test free online? It’s a great way to keep your mind sharp!

[Marvin]

Hello jacksonjohn

Glad you asked this question!

AxCrypt will automatically switch to ‘offline’ mode if it’s not possible to connect to the server. We store what we call an AxCrypt ID which is associated with your account on our servers. It will also exit on shut down.

It is suggested that you exit the application or shut down your system after use. This is the boundary, if you cross this you may become a bait for thieves and hackers. We are sorry, as we cannot provide protection to your laptop from getting stolen. Your data security is in your hands how you manage it.

For more details on Online/Offline please visit : https://axcrypt.net/blog/axcrypt-online-vs-offline/

[Author]

Posts