I've built out Passbox (https://passbox.co) and I'd love to get your thoughts on the homepage, the idea, pricing, etc. I want it all - let me have it (pretty please)!
Also, if anyone would like to take it for a spin and give me feedback I'd be happy to forward you the link to the test environment.
Cheers!
I like this - hacker proof?
I covered some of my approach on this here actually:
https://www.indiehackers.com/post/how-would-your-loved-ones-get-your-data-if-you-died-check-out-passbox-6873c3e82d?commentId=-LqWXUv2LWJ0em0mu54u
How secure is your platform? I assumed that the sensitive information are hashed in your database. That said, if they are reversible means hackers could easily have a whole chuck of passwords if they hack your single database.
Hi @silver_fang!
All the sensitive data a customer stores in Passbox is encrypted (with AES) using a customer-provided, custom token that the platform itself does not store. So even though I have database access all I see is encrypted text that is only reversible with the token (that I, and anyone with access to the system, wouldn't have).
If customers lose their token they'd need to start from scratch! Does that answer you?
Other vault type programs do this differently https://www.vaultproject.io/
@gator70, thanks for the link!
Are you talking about the secrets storage specifically being done differently? From my read of things (which could be wrong - there’s a lot on that site) the fundamentals are the same judging from this page that outlines their strategy.
This seems much stronger than your system. I know startups are hard. But when storing this data I would want the best system I could find.
Got it, @gator70!
Given the same underlying technology they definitely do a much better job of presenting their technical approach more clearly than my site - especially out of necessity to appeal to the developer group they target. I'm not 100% sold that I would need to focus on displaying similar information by default but it could make sense to optionally make it available elsewhere.
Thanks again!
You need to build trust
💯
Hi,
I like the Idea. Have you tested if there is a demand for it? If so how have you tested it. What I want to say is it could be a nice product but if no one would buy it, you should ask yourself if you should continue building it. I am not trying to turn you down. Just wanted to give some honest feedback.
Hi @sandersjj - thanks for the comment!
As a dev by trade I admittedly and against all startup advice skipped the idea validation phase before beginning this as a side project for my own enjoyment. In parallel with development on the app I enrolled in Y Combinator's Startup School and got some interest there and had a couple of user interviews with friends who support the idea. I've even had one commit as a customer already!
In general my takeaways are that this will likely be an uphill battle against:
That said all of this is a welcomed learning experience for me and luckily I'm not heavily financially invested here.
This comment was deleted 4 years ago
Two nights? Slick. Thanks for this. It’s definitely come up before in my talks with folks throughout development. One friend suggested even having your third parties create their own keys. We’ll see how my approach changes over time if this sticks at all.