{"action":"created","issue":{"url":"https://api.github.com/repos/ryanjohns/passmaster/issues/3","labels_url":"https://api.github.com/repos/ryanjohns/passmaster/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/ryanjohns/passmaster/issues/3/comments","events_url":"https://api.github.com/repos/ryanjohns/passmaster/issues/3/events","html_url":"https://github.com/ryanjohns/passmaster/issues/3","id":55117750,"number":3,"title":"Idea: \"Paranoid\" mode","user":{"login":"etipton","id":1596401,"avatar_url":"https://avatars.githubusercontent.com/u/1596401?v=3","gravatar_id":"","url":"https://api.github.com/users/etipton","html_url":"https://github.com/etipton","followers_url":"https://api.github.com/users/etipton/followers","following_url":"https://api.github.com/users/etipton/following{/other_user}","gists_url":"https://api.github.com/users/etipton/gists{/gist_id}","starred_url":"https://api.github.com/users/etipton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/etipton/subscriptions","organizations_url":"https://api.github.com/users/etipton/orgs","repos_url":"https://api.github.com/users/etipton/repos","events_url":"https://api.github.com/users/etipton/events{/privacy}","received_events_url":"https://api.github.com/users/etipton/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-22T06:05:03Z","updated_at":"2015-01-26T23:00:08Z","closed_at":null,"body":"@ryanjohns I'd be interested in implementing this if you think it's a good idea...\r\n\r\nBasically, I want the option to utilize asymmetric encryption via RSA keys. This will allow me to store a version of my Passmaster instance on a USB thumb drive, which will require two things for decryption:\r\n\r\n1. My password\r\n2. The RSA private key (only present on the thumb drive)\r\n\r\nMy preferred workflow would then be to plug in my thumb drive when I need the ability to access my passwords, enter my password once, use the \"Never expire\" option for session timeout, and be able to access my passwords from the thumb drive instance until I remove the drive.\r\n\r\nTwo-factor authentication can (should) be utilized as a fallback to generate new RSA keys, in case the thumb drive is lost or stolen.\r\n\r\nWhat I'm NOT sure about is how to handle Passmaster mobile since obviously a USB drive / on-device storage isn't really an option there. Maybe for \"paranoid\" mode we could just inform the user that mobile won't be an option."},"comment":{"url":"https://api.github.com/repos/ryanjohns/passmaster/issues/comments/71556972","html_url":"https://github.com/ryanjohns/passmaster/issues/3#issuecomment-71556972","issue_url":"https://api.github.com/repos/ryanjohns/passmaster/issues/3","id":71556972,"user":{"login":"ryanjohns","id":25428,"avatar_url":"https://avatars.githubusercontent.com/u/25428?v=3","gravatar_id":"","url":"https://api.github.com/users/ryanjohns","html_url":"https://github.com/ryanjohns","followers_url":"https://api.github.com/users/ryanjohns/followers","following_url":"https://api.github.com/users/ryanjohns/following{/other_user}","gists_url":"https://api.github.com/users/ryanjohns/gists{/gist_id}","starred_url":"https://api.github.com/users/ryanjohns/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ryanjohns/subscriptions","organizations_url":"https://api.github.com/users/ryanjohns/orgs","repos_url":"https://api.github.com/users/ryanjohns/repos","events_url":"https://api.github.com/users/ryanjohns/events{/privacy}","received_events_url":"https://api.github.com/users/ryanjohns/received_events","type":"User","site_admin":false},"created_at":"2015-01-26T23:00:08Z","updated_at":"2015-01-26T23:00:08Z","body":"Can you add some more specifics in here? I'm not sure I fully understand how this would work or the benefits. How would RSA keys be generated and how do they work with the master password? Also, what do you mean by \"store a version of my Passmaster instance on a USB thumb drive\"? How would syncing to the server work?"}}