RoboForm Everywhere Security
Security Information for RoboForm Users
The protection of your data is our highest priority. We have followed industry best practices to ensure the security and privacy of your information.
On this page is a summary of the security measures we put in place to ensure the secure and convenient use of RoboForm, as well as our recommendations for maximizing your data protection.
We strongly recommend that you use a strong Master Password to encrypt all your RoboForm data. Using a Master Password ensures nobody can gain access to your passwords or any other RoboForm data, either on our servers or your computer, without knowing your Master Password.
Your Passwords are Encrypted with Your Own Secret Key
If you are using the Master Password option, RoboForm stores your login credentials including usernames and passwords in encrypted files called Logins. Those Logins are encrypted using military grade AES encryption with the key that is derived from your RoboForm Master Password. The only way to unlock one of your Logins is by using your Master Password.
In addition, Siber Systems follows strict privacy rules regarding users' stored content and you are the only one allowed to access your RoboForm Online account.
This means that absolutely nobody, including Siber Systems, can access your Logins or other RoboForm data without knowing your Master Password.
Multifactor Authentication Option
The more "factors" that a company adds to the authentication process, the more secure that process will be. A factor can be one of three things:
- Something you have (i.e. hardware or software token)
- Something you know (i.e. password, security question)
- Something you are (i.e. fingerprint, retina scan)
Using our Multifactor Authentication option gives you the ability to ensure that only "registered" devices can access your account. You can register your devices with a onetime password (OTP).
Therefore, in order to access your account, you will be required to have:
- Something you know (your RoboForm Everywhere password)
- Something you have (a registered device - the device is registered with a OTP)
If this feature is enabled, both must be present for you to access your RoboForm Everywhere account. To learn how to enable multifactor authentication for your account please visit http://www.roboform.com/blog/multifactor-authentication.
Transferring Data Between RoboForm and RoboForm Online is Secure
RoboForm uses Secure Sockets Layer (SSL), a cryptographic protocol which provides secure communications on the Internet, when transferring your encrypted data files directly between your computer and the RoboForm Online servers. Using SSL, which is implemented on both your computer and our server, your Internet communications are protected and transmitted in encrypted form. Information you send can be trusted to arrive privately and unaltered to the server you specify and no other.
Our Data Center Facility Employs the Latest Security
RoboForm synchronizes the data between your computer and our RoboForm Online servers. Our servers are located at a secure facility with a 99.99% uptime guaranteed by the hosting service provider that uses double redundancy for power and connectivity.
In addition, we employ the use of sophisticated firewalls and adhere to the latest best practices.
In summary, we have taken every measure to ensure the security and privacy of your information. We hope you enjoy the extra security and convenience of RoboForm Online.