MyKi.co claims to be able to transfer your passwords securely from your iOS device to the macOS without having to relay through their own servers. But how is this possible?

"Your sensitive data is not stored in the cloud." -> https://myki.co/faq

It sounds like a spoof? It is not done through bluetooth or wifi apparently.

  • 1
    it claims it's not stored in the cloud, NOT that it never visits the cloud. that said, they could use webRTC data channels to easily P2P the data after an initial cloudy handshake. – dandavis Sep 28 '17 at 20:55

Your passwords are relayed through Myki servers but they are not stored there.

When you need to login on your computer:

  1. the extension sends a login request to your phone.
  2. When you approve the login request on your phone, your passwords are encrypted with an AES256-CBC key that is generated by the extension that you optically scan when you pair the phone with the browser
  3. the password is sent through our relay servers to the extension that decrypts it and injects it in the page.

So, your passwords are not stored on our servers. The servers act as a relay between your phone and your computer.

  • 1
    Are you affiliated w/ that particular company? If so, as your text (“our servers”) suggests, please disclose that:) – Tobi Nary Oct 29 '17 at 14:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.