Ukuphepha
Indlela eyakhiwe ngayo i-vault, nokuthi yikuphi ukuqhekeka okungatholakala.
Kugcine ukubuyekezwa ngomhlaka-21 Septhemba 2026 · AssuredAuth, yi-CircleRoll LLC
Lena incazelo yomphakathi yokuthi i-AssuredAuth ivikela kanjani izimfihlo ezimbili, amaphasiwedi namakhadi owagcina kuwo. Kubhalwe ukuze umfundi ogxile ekuphepheni akwazi ukuhlola yonke izimangalo ngokumelene nohlelo lokusebenza kanye nama-vector okuhlola ashicilelwe (atholakala kunoma yimuphi umbuyekezi uma ecela ku-hello@assuredauth.com). Isho okuyiqiniso hhayi okunye: akukho lutho lapha oluthi lungaphezu kokuhlaselwa, futhi akukho lutho oluthenjiswayo ngamaphesenti.
Inguqulo emfushane: i-vault ikhona endaweni eyodwa, ifoni yakho. Lonke inani elikuyo libethelwe ngokhiye ophethwe yihadiwe yokuphepha yefoni futhi ongenakukwazi ukuwuthumela. Asisebenzisi iseva ye-vault, asibambi ikhophi futhi asibambi ukhiye. Ifayela eliyisipele lishiya ifoni kuphela ngemva kokuba ibethelwe ngaphansi kwegama lokungena elingagcinwa ndawo.
Bika inkinga: hello@assuredauth.com. Bheka "Ukubika ubuthakathaka" ekugcineni.
1. Yini ebethelwe, ngayiphi
| Idatha | Ocingweni | Ukhiye |
|---|---|---|
| Izimfihlo ezimbili (imbewu ye-TOTP/HOTP/Steam) | OcingweniIsitolo esisekelwa yi-Keychain (iOS) / Android Keystore | UkhiyeUkhiye oboshwe ngehadiwe yesikhulumi; umugqa wedathabheyisi ubamba ireferensi kuphela (i-secretRef), hhayi imbewu |
| Amaphasiwedi (inani lephasiwedi, amanothi) | OcingweniUmugqa ovaliwe: AES-256-GCM, okungahleliwe okungama-96-bit nonce ngenani ngalinye | UkhiyeUkhiye wedatha ongahleliwe we-256-bit, ngokwawo ugoqwe ukhiye wehadiwe ku-§2 |
| Amakhadi (inombolo, ukuphelelwa yisikhathi, igama elisekhadini, i-CVC) | OcingweniUkuvalwa okufanayo namaphasiwedi; i-CVC ayikhethwa futhi igcinwa kuphela uma uyifaka | UkhiyeUkhiye wedatha ofanayo |
| I-Metadata (amagama esevisi, amagama abasebenzisi, izithonjana, ukuhleleka kokuhlunga) | OcingweniIsizindalwazi sohlelo lokusebenza (iSwiftData / Igumbi) | UkhiyeKuvikelwe ukubethela amafayela kohlelo lokusebenza; kuphathwa njengokungeyona imfihlo |
| Ifayela eliyisipele (.authbackup) | OcingweniNoma ngabe ukuphi: Amafayela, i-iCloud Drive, i-Google Drive appDataFolder, ishidi lokwabelana | UkhiyeUkhiye othathwe emushweni wakho wokungena (§3). I-Apple ne-Google bathola ifayela elivaliwe futhi akukho okunye |
| Iwashi/Umngane Wokugqoka | OcingweniI-Keychain yewashi / Izintandokazi Ezibekiwe | UkhiyeIzinkinobho zepulatifomu yokubuka; zidluliselwe ngesiteshi sedivayisi ebhangqiwe yepulatifomu |
| Ithrafikhi yesandiso sedeskithophu (amakhodi esikhathi esisodwa uma eceliwe) | OcingweniAkugciniwe; kudluliswa njengezivilophu ezibethelwe kusukela ekuqaleni kuya ekugcineni | UkhiyeIpheya lezinkinobho ze-X25519 ngokubhangqa ngakunye, ukhiye wangasese ku-Keychain / Keystore; i-relay ibona umbhalo we-cipher kuphela |
I-Diagnostics ayinayo indlela yokwamukela imfihlo. Akukho mcimbi wokuhlaziya ophethe insimu ye-vault. Akukho nzuzo evela ku-vault ebhalwa ku-log, kunoma yisiphi isakhiwo.
2. Lapho okhiye bahlala khona, kupulatifomu ngayinye
i-iOS. Ukhiye wedatha ugoqwa ukhiye okhiqizwe ngaphakathi kwe-Secure Enclave (kSecAttrTokenIDSecureEnclave) ngokulawula ukufinyelela .privateKeyUsage + .userPresence, ukufinyeleleka …ThisDeviceOnly, eqenjini lokufinyelela le-Keychain elabiwe lohlelo lokusebenza ukuze isandiso se-AutoFill sisebenzise ukhiye ofanayo. Ukhiye oyimfihlo awukwazi ukufundwa ngaphandle kwe-Enclave uhlelo lokusebenza, ngesipele, noma ngumlungisi wezinkinga; i-Enclave ivuma kuphela ukuyisebenzisa ngemva kokuba umsebenzisi ekhona (i-Face ID, i-Touch ID noma iphasikhodi yedivayisi). I-ThisDeviceOnly isho ukuthi isipele se-iCloud noma se-iTunes sefoni asithwali ukhiye; ifoni ebuyiselwe emuva iqala nge-vault engenalutho bese icela ifayela lakho lesipele kanye negama lokungena. Ucingo olungenayo ikhodi yokudlula alukwazi ukufaka ukhiye we-.userPresence (i-Enclave yenqaba ukuyidala), futhi i-simulator ithatha indlela efanayo ngokuklama (isaziso sayo sokuba khona siyisaziso esingenakuphendulwa ukuhlolwa): lapho ukhiye wedatha uyinto ye-Keychain yedivayisi kuphela - ayisatholakali kuzo zonke izipele, ayisafundeki ngenkathi ifoni ikhiyiwe, kodwa ingenaso isimemezelo sesibili - futhi isikrini sokuphepha sisho lokho kanye futhi sisikisela ukusetha ikhodi yokudlula.
I-Android. Ukhiye wedatha ugoqwa yi-AndroidKeyStore AES-256 key, ekhiqizwe ku-StrongBox lapho idivayisi inayo (ngaphandle kwe-TEE), lapho i-setUserAuthenticationRequired(true) kanye nokuqinisekiswa kwemizuzwana engama-30 ngemuva kwe-biometric noma i-device credential, i-setUnlockedDeviceRequired(true), kanye ne-setInvalidatedByBiometricEnrollment(true) ishiywe. Lelo fulegi lokugcina lithembekile kune-load bearing: I-Android iyisebenzisa kuphela kukhiye abadinga i-biometric kukho konke ukusetshenziswa, ngakho-ke kule nkinobho yemizuzwana engama-30 ene-device credential ayishintshi lutho - okuvimbela umunwe womuntu ongamazi ukuthi ukubhalisa kudinga i-PIN, nokuthi ukususa isikrini kwenza ukhiye ungasebenzi unomphela. Okhiye be-Keystore abathumeleki ngaphandle futhi abafakiwe ku-backup yamafu ye-Android. Isizinda lapho uhlelo lokusebenza luqamba khona ngokubuka kwalo (i-webDomain) sikholelwa kuphela kusiphequluli esaziwayo; kunoma yiliphi elinye iphakheji kumele futhi libe yilelo uhlelo oluliqinisekisile lelo phakheji (i-Digital Asset Links), njengoba noma yiluphi uhlelo lokusebenza lungafuna noma yiliphi isizinda.
Lokhu kusho ukuthini ngefayela ledatha elibiwe. Ifayela le-SQLite kanye nemigqa evaliwe kubhalwe ngendlela ye-ciphertext. Ukhiye ozivulayo uhlala kwihadiwe yokuphepha efonini ifayela elivela kuyo futhi awukwazi ukukopishwa ngefayela. Akukho lutho lokuqagela ungaxhunyiwe ku-inthanethi: ukhiye wedatha awuhleliwe, awutholakali kunoma yini umuntu ayikhethile.
3. Ifayela eliyisipele
Ama-backup yinto eyodwa ephuma efonini, ngakho-ke yindawo eyodwa lapho ukuhlasela okungaxhunyiwe ku-inthanethi kungenzeka khona ngokomthetho. Idizayini yenza lokho kuhlasela kubize kakhulu futhi kwenza kube kuncane kakhulu ukusebenza ngakho ngangokunokwenzeka:
- Umushwana wokungena okungenani unezinhlamvu ezingu-12 (ishidi liyala kancane futhi libonisa ibha yamandla).
- Akukho cebo lokungena eligcinwa noma kuphi, kufayela noma kuhlelo lokusebenza.
- Usawoti omusha ongahleliwe wama-byte angu-16 kanye ne-nonce yama-byte angu-12 kuwo wonke amafayela abhaliwe.
- Umzimba wonke uyi-AES-256-GCM, ngakho-ke igama lokungena elingalungile noma ifayela elonakele liyenqatshwa, alilokothi lihunyushwe libe udoti.
- Isihloko (ifomethi, inguqulo, amapharamitha e-KDF, usawoti) siboshelwe kuthegi ye-GCM njengedatha eyengeziwe eqinisekisiwe, ngakho ifayela elinesici somsebenzi esihleliwe phansi alivuli.
Ifayela liyi-JSON futhi liyafundeka kunoma yimuphi umhleli wombhalo; umbhalo we-cipher kuphela ongacaci. Umuntu othola ifayela eminyakeni emihlanu, uhlelo lokusebenza lungasekho, angabona kahle ukuthi livalwe kanjani bese elivula nge-OpenSSL noma yimuphi umtapo wolwazi we-Argon2.
Ifomethi v1 (ithunyelwe ngo-1.0, ihlala ifundeka)
{
"format": "authbackup",
"version": 1,
"kdf": "PBKDF2-HMAC-SHA256",
"rounds": 600000,
"salt": "<base64, 16 bytes>",
"cipher": "AES-256-GCM",
"nonce": "<base64, 12 bytes>",
"ciphertext": "<base64>",
"tag": "<base64, 16 bytes>"
}| Isinyathelo | Amabhayithi |
|---|---|
key | PBKDF2-HMAC-SHA256(passphrase as UTF-8, salt, 600000 rounds, 32 bytes) |
aad | UTF-8("authbackup:1:600000:") ‖ salt (ama-byte kasawoti aluhlaza, hhayi isisekelo64) |
ciphertext, tag | AES-256-GCM(key, nonce, plaintext, aad); ithegi amabhayithi angu-16, agcinwe ngokwehlukana |
plaintext | I-UTF-8 JSON, okhiye bahlungiwe: {"accounts":[…],"exportedAt":"…Z","passwords":[…],"version":1} |
Inothi Lokuhambisana: I-Android 1.0 ibhale uhlobo lwe-v1 — kdf ngosonhlamvukazi abancane, akukho tag key (tag engu-16-byte enamathiselwe ku-ciphertext), akukho datha eyengeziwe. Zombili izinkundla ziyaqhubeka nokufunda lawo mafayela (uma ithegi ingekho: hlukanisa ama-byte angu-16 okugcina, uvule nge-AAD engenalutho; qhathanisa i-kdf case-insensitive) futhi zombili manje zibhala kuphela ukwakheka okungenhla.
Ifomethi v2 (yamanje; okuzenzakalelayo kwama-backups amasha)
{
"format": "authbackup",
"version": 2,
"kdf": "Argon2id",
"memoryKiB": 65536,
"passes": 3,
"lanes": 1,
"salt": "<base64, 16 bytes>",
"cipher": "AES-256-GCM",
"nonce": "<base64, 12 bytes>",
"ciphertext": "<base64>",
"tag": "<base64, 16 bytes>"
}| Isinyathelo | Amabhayithi |
|---|---|
key | Argon2id(version 0x13, passphrase as UTF-8, salt, m = 65536 KiB, t = 3, p = 1, tagLength 32, no secret, no associated data) |
aad | UTF-8("authbackup:2:argon2id:65536:3:1:") ‖ salt |
ciphertext, tag | AES-256-GCM(key, nonce, plaintext, aad); ithegi amabhayithi angu-16, agcinwe ngokwehlukana |
plaintext | I-UTF-8 JSON, okhiye bahlungiwe: {"accounts":[…],"cards":[…],"exportedAt":"…Z","passwords":[…],"version":2} |
I-Argon2id iwukusetshenziswa kwe-C okubhekiselwe kukho (phc-winner-argon2, CC0), okuthengiswa kuzo zombili izinkundla. Ama-MiB angu-64 kanye nama-pass angu-3 athatha cishe umzuzwana kufoni yamanje futhi kwenza ukuqagela ngakunye kubize leyo nkumbulo nesikhathi kunoma iyiphi ihadiwe - impahla i-PBKDF2 engenazo uma iqhathaniswa nama-GPU rig, futhi isizathu sokuba khona kwe-v2. Umfundi akazinaki izinkinobho angazazi, ngakho umfundi we-v1 onikezwe umzimba we-v2 akalokothi awabone amakhadi.
Ubufakazi
Amafayela amathathu evektha yokuhlola (i-backup v1, i-backup v2 kanye ne-Argon2id) akhiqizwa ngokusetshenziswa kwesithathu, ngaphandle kwezinhlelo zokusebenza zombili (i-Node's OpenSSL ye-PBKDF2 kanye ne-AES-GCM, i-WebAssembly Argon2id ehlolwe ngesikhathi sokukhiqiza ngokumelene nezimpendulo ezishicilelwe zokusetshenziswa kwereferensi). Ngayinye ibamba umushwana wokungena, usawoti, i-nonce, umbhalo ocacile, ukhiye othathwe, i-AAD, umbhalo olindelekile kanye nethegi, kanye nefayela eliphelele. Iyunithi ihlola amafayela afanayo futhi iqinisekisa ama-byte afanayo - ngakho-ke i-backup evalwe epulatifomu eyodwa ifakazelwe, hhayi ukuthi ivulwa, kwenye, futhi isivumelwano sazo zonke ezintathu asiwona amakhophi amabili ephutha elifanayo. Ithuluzi elihambisanayo livula ifayela ifoni elibhalwe ngempela ngalolo hlelo lwesithathu olufanayo bese lihlola inhloko ngokumelene nemithetho engenhla (izinkinobho zefomethi ngqo, ngakho-ke akukho cebo noma igama elingaba khona; usawoti we-byte engu-16, i-nonce ye-byte engu-12, ithegi ye-byte engu-16 egcinwe ngokwehlukana; inguqulo 2 ku-64 MiB / 3 / 1 ngqo; igama lokungena elingalungile lenqatshiwe); i-iOS run ezenzakalelayo ibhala eyodwa ku-simulator bese iyivula ngaleyo ndlela, bese isesha isitsha sohlelo lokusebenza se-simulator, isitsha se-App Group kanye nedathabheyisi ye-keychain kuyo yonke iphasiwedi ehlwanyelwe kanye nenombolo yekhadi njenge-UTF-8 kanye ne-UTF-16 (ukushaya okungu-0).
4. Imodeli yosongo
| Isimo | Lokho abanakho | Lokho abakutholayo |
|---|---|---|
| Ifoni elahlekile noma eyebiwe, ikhiyiwe | Lokho abanakhoIdivayisi, ifayela ledathabheyisi, imigqa evaliwe | Lokho abakutholayoUmbhalo Oyimfihlo. Ukhiye wokugoqa use-Secure Enclave / StrongBox futhi ukhishwa kuphela ngemva kokukhiya kwedivayisi kanye ne-biometric entsha noma iphasikhodi. Ukusula ifoni kude (Thola Idivayisi Yami / Thola Idivayisi Yami) kuqeda ukhiye ngayo. |
| Ifayela lesipele elibiwe | Lokho abanakhoIfayela le-.authbackup elivela ku-akhawunti yefu, i-imeyili, ikhompyutha ephathekayo | Lokho abakutholayoUmzimba we-AES-256-GCM ngaphansi kwesihluthulelo esithathwe kugama lokungena okungenani izinhlamvu ezingu-12, elinosawoti wefayela ngalinye kanye ne-Argon2id kuma-64 MiB × ama-pass angu-3 (v2) noma i-PBKDF2 kuma-round angu-600,000 (v1). Akukho cebiso, akukho gama lomsebenzisi, akukho hlu lwe-akhawunti olucacile. Ukuqagela ngakunye kubiza ukutholakala okuphelele; akukho ndlela enqamulelayo. Igama lokungena elinamandla liyisivikelo sonke lapha, futhi uhlelo lokusebenza lusho njalo eshidini. |
| Idivayisi eyebiwe enesikrini esivuliwe | Lokho abanakhoUcingo olusesandleni sakho, luvuliwe | Lokho abakutholayoUhlu lwamakhodi. I-vault (amaphasiwedi, amakhadi) ingemuva kokukhiya kohlelo lokusebenza futhi ikhiya kabusha kusibali sikhathi sokukhiya okuzenzakalelayo (ngokushesha / 1 min / 5 min); inani elisusiwe ekubethelweni likhona kwimemori kuphela ngenkathi isikrini salo silibonisa. Ukugcwalisa okuzenzakalelayo kanye nokuthumela umbhalo ocacile kucela i-biometric entsha ngisho noma uhlelo lokusebenza luvuliwe. Vula ukukhiya kohlelo lokusebenza ngokuthi "Ngokushesha" uma lokhu kuyisimo osikhathazayo. |
| Uhlelo lokusebenza olubi efonini efanayo | Lokho abanakhoI-sandbox yolunye uhlelo lokusebenza, ibhodi lokunamathisela, amaqhinga okufinyeleleka noma okumboza | Lokho abakutholayoAyikwazi ukufunda amafayela ethu (i-platform sandboxing) noma ukusebenzisa ukhiye wethu (ukhiye uboshelwe ebunikazini bethu bokusayina kanye nokuba khona komsebenzisi). Amakhophi asuswa ebhodini lokunamathisela ngemva kwemizuzwana engama-30; ku-Android ikhophi imakwe njengebucayi futhi ayifakiwe emlandweni webhodi lokunamathisela. Isethi yezikrini ze-Vault FLAG_SECURE ku-Android (akukho zithombe-skrini, akukho ukuqoshwa kwesikrini, akukho lutho kuswishi); i-iOS isusa isithonjana sesishintshi. Ukugcwalisa okuzenzakalelayo ku-Android kunikezwa kuphela kuzinhlelo zokusebenza uhlelo oluziqinisekisile ngokumelene nesizinda esigciniwe (Izixhumanisi Zempahla Yedijithali), ngakho-ke uhlelo lokusebenza olufana alunikezwa iphasiwedi yakho. |
| Ikhasi le-Phishing | Lokho abanakhoIsayithi elifana nalelo oligcinile | Lokho abakutholayoAkukho okugcwalisayo. Ukufanisa kwenziwa ngesizinda esibhalisiwe (uhlu lwezijobelelo zomphakathi, oluhlanganisiwe futhi olubuyekeziwe ngohlelo lokusebenza): login.example.com kanye ne-example.com match, example.com.evil.net kanye ne-examp1e.com azifani. Isiphequluli esingaphakathi kohlelo lokusebenza sifana ngendlela efanayo futhi sigcwalisa kuphela kufreyimu ecelile, sihlolwe kabusha ngokumelene nomsuka walowo freyimu ngesikhathi sokugcwalisa; i-host engenasizinda esibhalisiwe sayo - ikheli le-IP, igama elingenalutho kunethiwekhi yendawo - ifana ncamashi futhi ayikho into ekhululekile. I-iOS AutoFill yengeza ukuhlolwa kwe-associated-domains ye-Apple. Iphasiwedi okumele uyinamathisele ngesandla ekubukekeni okufanayo iseseyingozi; uhlelo lokusebenza alukwazi ukususa lokho, lugweme ukusiza kuphela. |
| Amaseva ethu | Lokho abanakho— | Lokho abakutholayoAyikho iseva ye-vault. I-AssuredAuth ayinawo ama-akhawunti, ayinalo ukungena ngemvume futhi ayinakhophi ye-vault yakho, ngakho-ke akukho lutho lwakho oluseceleni kwethu oluzontshontshwa futhi luqhekeke. Izinto ezimbili zisebenza ohlangothini lweseva, futhi akukho lutho oluthinta i-vault: ibhokisi leposi elidluliselwe lesandiso sedeskithophu, eligcina izimvilophu ezibethelwe kusukela ekuqaleni kuya ekugcineni (amakhodi esikhathi esisodwa, asuswa uma efundwa; i-relay ayikaze ibe nesihluthulelo), kanye namaseva okuphuma okuxhumeka kwangasese okuzikhethela, athwala ithrafikhi futhi angagcini amalogi okufinyelela. |
| Isicelo sokubizelwa enkantolo noma sikahulumeni | Lokho abanakhoInqubo yezomthetho eqondiswe kithi | Lokho abakutholayoAkukho okufanele sikunikeze: asinalo i-vault, asinakhiye, asina-password futhi asina-backup. Singaphoqeleka ukusho lokho; asinakuphoqeleka ukukhiqiza okungekho. |
5. Ibhodi lokunamathisela, izithombe-skrini kanye nememori
- Ikhophi ibeka inani ebhodini lokunamathisela imizuzwana engama-30, bese iyisusa uma iseseyethu. Ku-Android i-clip iphawulwe ngokuthi i-EXTRA_IS_SENSITIVE ngakho uhlelo luyifihla ekubukeni kuqala ebhodini lokunamathisela kanye nomlando; ku-iOS into yebhodi lokunamathisela itholakala endaweni kuphela (ayihanjiswa kwamanye amadivayisi).
- Izikrini ze-Vault (Amaphasiwedi, Iphasiwedi, Amakhadi, Ikhadi, amashidi e-password, ukuthekelisa umbhalo ocacile) setha i-FLAG_SECURE ku-Android. I-iOS ayinayo ifulegi elilinganayo; uhlelo lokusebenza lufaka isithonjana salo kuswishi sohlelo lokusebenza futhi amanani angemuva kwe-eye toggle ngokuzenzakalelayo.
- Amanani asuswe ukubethela ahlala kwimemori kuphela ngenkathi isikrini siwabonisa futhi ayawa lapho ehamba noma uhlelo lokusebenza lukhiya. Ukhiye wedatha uyavulwa wesicelo futhi awugcinwanga ku-lock.
- Ukuthunyelwa kombhalo ocacile kukhona (ngakho ungahamba njalo) futhi kungemuva kweshidi lokuqinisekisa kanye ne-biometric entsha, futhi isikrini saso sise-FLAG_SECURE.
6. Ukugcwalisa okuzenzakalelayo: yini egcwalisayo, nokuthi yini engagcwalisi
| Kuphi | Amaphasiwedi | Amakhadi |
|---|---|---|
| I-iOS: I-Safari nezinhlelo zokusebenza (isandiso se-AutoFill) | AmaphasiwediYebo, ngemva kokufaka i-Face ID entsha / i-Touch ID / iphasikhodi kusandiso (LAContext), futhi kuphela kwesizinda esibhalisiwe lapho okufakiwe kugcinwe khona, ngokuhlola kwe-Apple ama-domain ahlobene nezinhlelo zokusebenza. | AmakhadiCha. Ukugcwalisa ngokuzenzakalelayo kwekhadi ku-Safari kungokwa-Apple kuphela; isikrini sekhadi sithi "Kugcwalisa isiphequluli se-AssuredAuth kanye ne-Copy" futhi akuthembisi lutho olunye. |
| I-Android: izinhlelo zokusebenza kanye ne-Chrome (AutofillService) | AmaphasiwediYebo, ukuqinisekiswa kwesethi yedatha ngayinye: uhlelo lubonisa i-BiometricPrompt ngaphambi kokugcwalisa; iphakheji yohlelo lokusebenza ifaniswe kuphela uma i-Digital Asset Links iyibopha nesizinda esigciniwe | AmakhadiYebo, izinkomba ze-creditCardNumber, i-creditCardExpiration* kanye ne-creditCardSecurityCode, isango elifanayo le-biometric |
| Isiphequluli se-AssuredAuth (zombili izinkundla) | AmaphasiwediYebo, ngesizinda esibhalisiwe — i-host engenawo nhlobo umfanekiso wayo — kufreyimu ebuze, i-biometric ngaphambi kokugcwalisa | AmakhadiYebo, ngokutholwa kwensimu, i-biometric ngaphambi kokugcwalisa |
| Izinkinobho zokukopisha | AmaphasiwediNgemuva kokukhiya kohlelo lokusebenza, ibhodi lokunamathisela lamasekhondi angu-30 | AmakhadiInombolo, ukuphelelwa yisikhathi, i-CVC (imithetho efanayo) |
Akukho okugcwalisayo kumuntu ofana naye. Akukho okugcwalisayo ngaphandle kwe-biometric.
7. Okungenzeki neze
Ayikho iseva ye-vault. Akukho ukuhlaziya okuthwala insimu ye-vault. Akukho ukuthunyelwa kombhalo ocacile ngaphandle kweshidi lokuqinisekisa kanye ne-biometric entsha. Akukho i-SDK yomuntu wesithathu elayishwe esikrinini se-vault. Akukho sithombe-skrini sesikrini se-vault. Akukho cebo lokungena. Akukho ukubhaliswa kwamanani, kunoma yikuphi ukwakhiwa.
8. Lokho esingenakukwazi ukuzivikela kukho
Umushwana wokungena ubuthakathaka ngokwanele ukuqagela. Ifoni enohlelo lokusebenza oluphazamisekile ekuqaleni (idivayisi ephukile noma egxilile ingaqamba amanga kuhlelo lokusebenza ngakho konke okungenhla). Umuntu obukwayo ngenkathi ethayipha. I-Malware kudeskithophu oyinamathisela kuyo. Sikusho lokhu ukuze uhlu olungenhla lufundwe ngalokho oluyikho: izinto umklamo ongazisusa, ususwe.
9. Isimo sokubuyekeza
Lo mklamo uhlolwe ngeyunithi ngokumelene nezimpendulo ezaziwayo ezishicilelwe kuzo zombili izinkundla kanye nakuma-vector awo ahlukene. Isibuyekezo sangaphandle sisohlwini lomnikazi ngaphambi kokuba i-vault ikhangiswe ohlwini lwesitolo; kuze kube yilapho sekwenzekile, lo mbhalo uzosho njalo lapha.
10. Lapho izinto zihamba khona
Akukho lutho lwegumbi lokugcina impahla oluphuma efonini, kodwa izinto ezimbalwa ezizungezile zisebenza emishinini yabanye abantu. Lolu uhlu, nokuthi ngayinye iphetheni; ukugeleza kwedatha ngokwako kuchazwe kunqubomgomo yobumfihlo ku-https://assuredauth.com/privacy.
- I-Google Cloud / Firebase — ibhokisi leposi elidluliselwe lesandiso sedeskithophu (izimvilophu ezibethelwe kusukela ekuqaleni kuya ekugcineni, ezisusiwe uma zifundwa), ama-push token, isimo sokuthenga, kanye nemiyalezo ethunyelwe ngefomu lokuxhumana.
- I-Vercel — assureauth.com, amakhasi ayo kanye nemisebenzi emincane ngemuva kwawo.
- I-Vultr — amaseva okuphuma oxhumano oluyimfihlo. Ithrafikhi idlula kuwo; akukho okugciniwe.
- I-Apple ne-Google Play — ukuthenga nokubhalisela, ezitolo zabo.
- I-PostHog — ukuhlaziywa komkhiqizo: ukubalwa kwalokho okusetshenziswayo, okungahlobene nokungabi bikho kobunikazi.
- I-RevenueCat — isimo sokubhaliselwe: okusebenzayo noma okuphelelwe yisikhathi, nokuthi kuhlelo luni.
Ngayinye ibamba lokho okushiwo umugqa wayo futhi ayigcini lutho oluvela endaweni yokugcina impahla. Uhlu luyashintsha uma umkhiqizo wenza kanjalo, futhi lesi sigaba siyashintsha kanye nawo.
Ukubika ubuthakathaka
Uma ukholelwa ukuthi uthole ubuthakathaka kunoma yini echazwe lapha, bhalela ku-hello@assuredauth.com enesihloko esithi "Ukuphepha". Sicela ufake ipulatifomu, inguqulo yohlelo lokusebenza kanye nezinyathelo; ubufakazi obusebenzisa idatha yakho kwanele, futhi sicela ukuthi ungahloli ngokumelene neyabanye abantu. Asinikezi ukhiye we-PGP; uma umbiko ungahambi nge-imeyili ecacile, sho njalo kumyalezo wokuqala futhi sizohlela enye indlela.
Lokho esikuthembisayo: siyavuma zingakapheli izinsuku ezintathu zebhizinisi, sikugcina unolwazi ngenkathi sisebenza kukho, silungise okungokoqobo ngaphambi kokuba kushicilelwe noma yini ngakho, futhi sikunike udumo lapha uma ufuna ukunconywa. Ngeke sithathe isinyathelo sezomthetho ngocwaningo olwenziwe ngokwethembeka ngaphakathi kobubanzi obungezansi.
Ngokwesilinganiso: izinhlelo zokusebenza ze-iOS ne-Android, izinhlelo zokusebenza zewashi, isandiso sedeskithophu, i-assuranceauth.com kanye ne-API yayo. Okungajwayelekile: i-App Store kanye ne-Google Play uqobo, abahlinzeki ababalwe ngenhla, ubunjiniyela bezenhlalo banoma ubani, kanye nokwenqatshwa kwensizakalo.
Akukho mali okwamanje. Umbiko uphendulwa ngokulungiswa kanye nokubonga, hhayi ngemali.