Yes, PassHub has both multifactor authentication and client-side encryption. PassHub uses 'something you have' (WWPass Key) as a first factor and 'something you know' (PIN) or something you are (biometrics) as a second factor.

The only thing the QR code contains is a random authentication session ticket, which does not disclose any user information to attackers. This is an important difference between WWPass QR codes and QR codes used by other companies/authenticators, which often encode unnecessary and unsafe personal identifying information.

It is important to remember 3 things about QR Codes:

(1) They are just a transport tool, and how the tool is used is the most important factor regarding your security.

(2) If a company encodes things like personal identifying information or usernames in a QR code, this is both unnecessary and unsafe –WWPass does not do this; only a random authentication session ticket is used.

(3) Even if someone stole your phone with WWPass Key app, they can’t automatically get in everywhere just by scanning the QR code –an additional verification factor like a PIN, fingerprint or facial recognition would also be needed. Additionally you can restore your WWPass Key onto a new mobile device, which will instantly block the stolen WWPass Key.

This depends on your deployment. For self-hosted, data is stored on your servers. You can use physical servers in your datacenter, or virtual servers from cloud providers. If deployed as a SaaS, your data is stored on PassHub.net’s secured servers.

For a simple, non-redundant configuration, you can use a single server. If you need high availability, you will need at least three servers.

We use MongoDB.

Not with the PassHub for Business SaaS version. We selected MongoDB for its combination of efficiency and reliability. Self-hosted PassHub may be ported on other high end databases (but not on MySQL/MariaDB or other databases that do not support redundancy)

No way! Anything a human can read, type, or write on a post-it note can be easily compromised. PassHub uses WWPass technology (WWPass Key) to encrypt the encryption keys. No one ever has access to other users’ information, not even administrators.

No. WWPass technology is necessary to ensure the security of the entire system. WWPass key is used both for password-less login and client-side data encryption.

No. PassHub uses WWPass, which is cloud-based.

Of course. The entire database should be backed up regularly. These backups can be used to restore the system in case of disaster. Backups contain only encrypted data, so even if they fall into the wrong hands, no data would be compromised. Each user can backup their data in unencrypted format (100 percent compatible with KeePass). In this case, they are responsible for safeguarding their own data, since it is outside the PassHub platform.

Data can be imported from KeePass directly. It also can be imported as a properly formatted comma delimited text file.

PassHub for Business is an open source project, so you can download and install it yourself. However, to make PassHub work, you need subscription to the WWPass authentication service. This service is free for a small number of users, and for larger organizations it is priced below the cost of a typical password manager license. For more details and to subscribe, visit our pricing page.

Never. PassHub uses client-side encryption, so secret data gets decrypted only on each individual user’s devices (PC, tablet or phone) using that user’s private key. That private key also gets decrypted on the same device, and can not appear anywhere else. That’s the magic of WWPass technology!

PassHub is a collaboration tool, allowing users to store and share various data, including files. When one user stores data in their safe, it immediately becomes available to all other users who have access to that particular safe anywhere in the world.