Password choice

CryptoMailer has an intuitive management of passwords.

The choice of a password is immediately accessible from the "Password" button on the main interface. To use a password, simply select from the list:

023

The drop-down menu associated with the "Password" button offers at any moment:

•	A list of already defined passwords,

•	To acccess to the management of passwords ("List ...") to add, change or delete a password,

•	To enter a password manually without picking it from the password list ("Manual").

1. Choosing a password in the list

CryptoMailer will store an unlimited number of passwords. Once stored (see Management passwords), they are not readable. You can associate the name of email recipient you are going to send email to.

Saving passwords and recipient names allows the software to find automatically the right password for each decryption when decryption is requested.

2. Entering password manually (menu "Manual")

When the mode "Manual" is selected, the box on the right button becomes active and allows to enter a password manually without picking it from the password list. The length of the password is unlimited.

All the characters are allowed: uppercase, lowercase, numbers, special characters or accents. Moreover, the mix of characters is one of the safety rules in the composition for a password.

This mode is useful when the user does not wish to keep track of this particular password in the future.

001b

3. Rules composition of a password

To ensure a good level of safety in protecting access to software or data encryption, it is recommended to follow certain rules of composition of a password.

•	Rule1: Use a long password, at least 6 characters, 10 is the perfect length that could ease "brute force" attacks.

•	Rule2: Do not be limited to lower case alphabetic characters. Use upper and lower case characters, numbers, special characters (#, &,%,…) or accents (é, ç,...)

•	Rule3: Avoiding the use of words or names related to your private life (name of daughter, date of birth, …) or too conventional (password, admin, toto, etc…) that could ease "dictionary" attacks.