Os arquivos são criptografados pela AES e são armazenados localmente, depois sincronizados com os servidores do Dashlane após o login para fins de sincronização.
dados e arquivos de senha do usuário
Any stored data is always encrypted into an indecipherable string of random letters, numbers, and symbols, which is stored locally and also on Dashlane servers for synchronization purposes. However, for your protection, as well as our own, we never store your Master Password or any of its derivatives on our servers at any time.
Fonte: Arquitetura de segurança patenteada do Dashlane
In the folders contained AES-encrypted files that contained passwords
and login info, sharing rights details, purchase histories, and more. These
files are synced with Dashlane servers upon login (provided there is internet access). In particular, we found that the file localSettings.aes
contains the device authentication. Note that this device authentication is NOT tied to the computer itself; for example, if this folder was copied onto another computer, that computer could log into the account without prior verification.
Fonte: Análise de segurança do Dashlane (maio de 2016)
Localização no macOS:
$ sudo lsof -p $(pgrep -d, Dashlane) | grep -w $USER/Library
/Users/USER/Library/Application Support/CloudDocs/session/containers/com.apple.Preview.plist
/Users/USER/Library/Saved Application State/com.dashlane.Dashlane.savedState/window_1.data
/Users/USER/Library/Saved Application State/com.dashlane.Dashlane.savedState/data.data
/Users/USER/Library/Saved Application State/com.dashlane.Dashlane.savedState/windows.plist
/Users/USER/Library/Caches/com.dashlane.Dashlane/Cache.db
/Users/USER/Library/Saved Application State/com.dashlane.Dashlane.savedState/window_9.data
/Users/USER/Library/Caches/com.dashlane.DashlaneAgent/Cache.db-shm
/Users/USER/Library/Caches/com.dashlane.DashlaneAgent/Cache.db
/Users/USER/Library/Caches/com.dashlane.DashlaneAgent/Cache.db-wal
/Users/USER/Library/Caches/com.dashlane.DashlaneAgent/Cache.db-shm
/Users/USER/Library/Caches/com.dashlane.DashlanePluginService/Cache.db-shm
/Users/USER/Library/Caches/com.dashlane.DashlanePluginService/Cache.db
/Users/USER/Library/Caches/com.dashlane.DashlanePluginService/Cache.db-wal
/Users/USER/Library/Caches/com.dashlane.DashlanePluginService/Cache.db-shm
senha mestra
Your master password is your private key to unlocking Dashlane. No one knows it but you, not even Dashlane, and it’s not stored anywhere on your computer or our servers.
Fonte: Segurança do Dashlane
All essential user data is encrypted using AES-256 with a
key that derives from the user’s master password, and neither the master
password nor the key is stored locally or on Dashlane’s servers. As a result, the security of AES ensures that it is infeasible to obtain a user’s sensitive information without knowledge of their master password.
Fonte: Análise de segurança do Dashlane (maio de 2016)