Sensitive Data

This page pertains to:

• Your KeePass database file
• Your keyfiles

To find out how Tusk handles your master password, read Credential Cache Memory.

Your KeePass database file.

This is a physical file much like a word document or an MP3 that you can keep on your hard drive, carry on a USB drive, or keep in cloud storage like Dropbox or Google Drive.

The file is encrypted with a key derived from your master password and keyfile.

If you use a cloud provider or shared link

Your keyfile is fetched from that provider almost every time you unlock it. That means every time you open the Tusk popup menu, a request is made on your behalf to your cloud storage provider asking for this encrypted file.

For up to two minutes, after the file is decrypted, its data can be kept in-memory in the Background page for faster retrieval. For example, if you open Tusk to copy a password and 30 seconds later open tusk again, there's a high probability that the information you see came from a cache of your data. Every two (2) minutes, an alarm in the background page goes off and this in-memory cache is cleared.

If you use local file upload

Your encrypted password file is kept in Tusk's local storage. Local storage exists on-disk in the directory where your other browser data lives. Due to limitations in the local storage API, the only way to properly remove a keypass database file from Tusk's disk space is to perform a factory reset under the Advanced Settings tab.

This database will not automatically update. It freezes a copy at the time you upload it to Tusk, and in order to update your password file, you must upload it again.

Your Keyfiles