The ability to password protect individual projects

ml
mlsc4
Posts: 1
Joined: Sat Sep 23, 2017 5:16 pm
Platform: Win + iOS

Sat Sep 23, 2017 6:03 pm Post

For the more privacy-conscious community, cloud services like Dropbox aren't particularly appealing. I understand though that support for alternative open-source, zero-knowledge platforms is an unrealistic request, as most users are fine using something like Dropbox and implementing integration with another cloud service would be a complicated, time intensive task.

One workaround that might be feasible though is giving users the option to protect their Scrivener projects with a password, not unlike Microsoft giving users the ability to password-protect individual Word documents, or Apple allowing you to quickly encrypt individual notes with a password - something that works in tandem with iCloud note sync (here's a quick iCloud security overview - https://support.apple.com/en-us/HT202303).

As the world as a whole becomes more and more privacy-conscious and encryption becomes more commonplace across a variety of different apps and services, I think this would be an awesome feature, and would make more privacy-conscious users feel much more at ease when uploading their Scrivener projects to Dropbox :)

do
dogdaysrhere
Posts: 1
Joined: Wed Oct 04, 2017 3:31 am
Platform: Mac + iOS

Wed Oct 04, 2017 3:35 am Post

I second this request -- and urge Lit & Latte to add this feature ... yesterday!

User avatar
kewms
Posts: 3239
Joined: Fri Feb 02, 2007 5:22 pm
Platform: Mac

Wed Oct 04, 2017 4:45 am Post

Transferring projects via iTunes is the most secure alternative to Dropbox, and doesn't require any changes to Scrivener itself.

Apple's encryption is quite good, on both iOS and Mac OS systems.

Katherine
Scrivener Support Team

Ru
Rusty75
Posts: 6
Joined: Thu Nov 19, 2015 9:37 pm
Platform: Mac

Tue Oct 10, 2017 8:42 pm Post

Yes, please!

va
vanbibber
Posts: 1
Joined: Mon Oct 23, 2017 5:37 pm
Platform: Windows

Mon Oct 23, 2017 5:40 pm Post

I would really appreciate the ability to password projects as well as individual documents.

Mi
Mikeyt
Posts: 1
Joined: Thu Dec 07, 2017 10:18 am
Platform: Mac

Thu Dec 07, 2017 10:20 am Post

Yes please!! I also use scrivener as a diary. Password protection and encryption would be superb.

je
jeanRem
Posts: 8
Joined: Tue Jan 12, 2016 9:46 am
Platform: Mac

Sun Dec 10, 2017 5:12 pm Post

I do not understand why this very simple function could not be implemented in Scrivener. This is upmost trivial. :roll:

User avatar
popcornflix
Posts: 204
Joined: Tue Feb 13, 2007 8:18 pm
Location: Row 15 Seat 107

Sun Dec 10, 2017 9:00 pm Post

Since .scriv files on the Mac are packages, password protecting them isn't really an effective security measure. Anyone with a little motivation and knowledge would just open the package and look at the RTF files inside without even opening Scrivener.

If you're concerned about the security or privacy or your .scriv files, you should look into encryption. You can either encrypt entire volumes (like a thumb drive) or encrypt file-by-file. There are many apps available on Mac and Windows for either solution.

Scrivener shouldn't be handling this. If you value your privacy enough to want password protection, you should value it enough to use software whose primary purpose is data security.

The other advantage of using outside software is that you could implement it today, and your work would be safe.
.:popcornFlix:.

User avatar
kewms
Posts: 3239
Joined: Fri Feb 02, 2007 5:22 pm
Platform: Mac

Sun Dec 10, 2017 9:02 pm Post

jeanRem wrote:I do not understand why this very simple function could not be implemented in Scrivener. This is upmost trivial. :roll:


No, it's actually not. You'd have to password protect an entire directory structure, not just an individual file, potentially including aliased research files located outside the project folder, plus all of Scrivener's own automatic backups. But you'd have to protect the individual files in that structure, too, otherwise backups taken by other software might include unprotected copies of the individual files. And the mechanism would have to be robust enough to work (again, for the entire folder structure) across multiple computers and platforms, while not impeding Scrivener's functionality or performance in any way.

Katherine
Scrivener Support Team

User avatar
kewms
Posts: 3239
Joined: Fri Feb 02, 2007 5:22 pm
Platform: Mac

Sun Dec 10, 2017 9:07 pm Post

popcornflix wrote:If you're concerned about the security or privacy or your .scriv files, you should look into encryption. You can either encrypt entire volumes (like a thumb drive) or encrypt file-by-file. There are many apps available on Mac and Windows for either solution.

Scrivener shouldn't be handling this. If you value your privacy enough to want password protection, you should value it enough to use software whose primary purpose is data security.


This. The "trivial" solution might make you feel more secure, but would only guard against equally trivial attempts to access your files.

If you have a privacy concern, rather than a true security concern -- for instance you don't want family members snooping around in your diary -- the best, easiest, and most immediate solution is to create a separate user account with a strong password that only you know.

Katherine
Scrivener Support Team

User avatar
KB
Site Admin
Posts: 19198
Joined: Tue Jun 13, 2006 11:23 pm
Platform: Mac
Location: Truro, Cornwall
Contact:

Mon Dec 11, 2017 11:50 am Post

Yes, Katherine and popcornflix have hit the nail on the head. We do get frequent requests to password-protect Scrivener projects, but it's not like password-protecting a single file such as a Word document, which can be encrypted. As Katherine and popcornflix point out, a Scrivener project is not a single file but a folder full of many files. That entire directory would need encrypting, and it would need decrypting on read. That is far from simple. Would each file be decrypted as it was needed? Or would an entire (possibly huge) project directory be encrypted and have to be decrypted as a whole on project open?

Adding password-protection so that no one can easily access a project by double-clicking it wouldn't be particularly difficult, but it would give a false sense of security, given that anyone with computer know-how could, as popcornflix says, get access to the data in your projects (and it would be no protection from Dropbox).

Note that Ulysses has the same problem - it provides a library of files, and although it provides basic password protection to keep work away from prying eyes, the Ulysses guys make it clear that this is not the same as encryption: https://ulyssesapp.com/kb/password-lock.

All the best,
Keith
"You can't waltz in here, use my toaster, and start spouting universal truths without qualification."

User avatar
Bridey
Posts: 191
Joined: Wed Nov 22, 2017 2:24 pm
Platform: Mac

Mon Dec 11, 2017 1:16 pm Post

Mac users: you can create an encrypted disk image to store Scrivener projects. AFAIK, it works without problems, especially if you are only working on macOS and not syncing to iOS devices.

Encrypted Image.jpg
Encrypted Image.jpg (154.54 KiB) Viewed 112 times