ALToolbar Security
ALToolbar is highly secure with state-of-the-art strong encryption and best practice login procedures that keep your data safe and secure.
The quick version of ALToolbar security is this:
A) ALToolbar encrypts your password so that we never see it and can never know it (you don't need to trust us there)
B) ALToolbar communicates over SSL so it is always protected and secure
C) Your data is encrypted inside ALToolbar and never sent over-the-wire unencrypted
You data is always safe and secure. The ONLY person that can ever access it is YOU!
Here's how ALToolbar security works once you've registered:
- You type your email address and password into ALToolbar to login
- Your password is encrypted in ALToolbar before being sent to the ALToolbar server over SSL so that we never see your password
- The ALToolbar server authenticates your login request
- Your encrypted ALPass Online and Bookmark data is sent over SSL to you and then decrypted in ALToolbar
- When you update a record in ALPass Online or your Bookmarks, it is encrypted with your password (that we don't know), then sent over SSL to the ALToolbar server
The good part is that we never know your password. There is no way for us to decrypt your data. It is quite literally impossible. And nobody else could either!
The other side of that is that you can never forget your password. If you forget your password, your ALPass Online data and your Bookmarks data is forever lost! So, please, DO NOT FORGET YOUR PASSWORD! We cannot give it back to you. We can delete all your data, and reset your password, but we cannot retreive your password or your data.
The encryption used in ALToolbar is ARIA 256. ARIA is similar to AES. There is no known practical attack on any version of ARIA.