Skip to main content

Security

With cyber world the way it is, Security should be the first feature of any product and so is of Brobench. We recognize that our customers use our products to connect to a system, which holds data of paramount importance, and hence we pay even more attention than other companies about how our features impact security.

Here are some of the things you may want to know about pertaining to Brobench security.

  • Brobench runs on your machine with no cloud connection, except for licensing
  • We do not send your data outside your computer except when you want to export any cloud integrations like Google Sheets
  • We safeguard sensitive details of your connection, session and oauth tokens using a Master password, without it sensitive secrets become useless
  • We use industry standard strong encryption algorithms (AES with SHA-256) to encrypt those secrets
  • We do not include third-party tracking scripts in the product
  • In the event you provide us with your name/email and other identifiers via Contract form or emails, we will not share that with any third party

Master Password​

Connections include very sensitive information like password and/or tokens. These must be safeguarded to ensure security. To that end, Brobench doesn't save the passwords/tokens in plan text but encrypts using a single password called Master Password. This Master Password is not saved to any persistent storage, and never transmitted outside your computer.

You need to set this password the first time you use the extension or after it data has been removed clean. In such cases, it will show the below dialog.

Make sure you enter a long (at least 12-15 chars) but memorable password.

Locking and Unlocking​

The master password that you enter is stored in the session storage of the browser which will reset when you restart the browser or update the extension. In such cases, when you goto Logins tab, it will prompt you to enter the Master password.

You can also clear the entered master password by clicking on the Lock icon in the Logins toolbar. Once you clear, you cannot use any of the Connections until you unlock it by entering the Master password.

At this time, if you forget your master password, you will need to uninstall the extension and re-install to set up again. But in future versions, we will provide a mechanism to change master password or set up a new one.