Encryption model & independent audits — found from sitemap — heylogin

Cited by

Facts read from this source

• Zero knowledge Report an error

  “Zero-knowledge architecture”

• No vendor access Report an error

  “Thanks to end-to-end encryption, heylogin GmbH has no access to stored data”

• Two factor default Report an error

  “2-factor secure by default and”

• Crypto algorithms Report an error

  “Modern cryptographic algorithms XSalsa20 + Poly1305 and Curve25519”

• Vault separation Report an error

  “Strict separation between vaults and users”

• Device security chip encryption Report an error

  “Stored data is encrypted in strictly separated vaults using the security chips of the respective user devices.”

• Admin recovery encryption Report an error

  “Additionally, all vaults are encrypted with the security chips of admins, enabling cryptographic recovery in case a device is lost or replaced. However, admins cannot access passwords stored in personal vaults.”

• Cloud storage only Report an error

  “The heylogin cloud functions solely as a storage service and has no ability to decrypt the vaults.”

• Second factor unlock Report an error

  “the security chip needs to be unlocked locally using a second factor (fingerprint, face unlock, PIN)”

• Supported authenticators Report an error

  “heylogin supports Smartphone Security Key Touch ID / Windows Hello Smartwatch”

• Security whitepaper Report an error

  “In the security white paper, you will find all the cryptographic details of our end-to-end encryption and an explanation of how our security architecture works.”

• Provider regions Report an error

  “Our production system runs on Hetzner servers in Nuremberg, with a standby server in Falkenstein for rapid failover in emergencies.”

• Backup provider Report an error

  “Independent backups are securely stored at IONOS, ensuring recovery in case of a complete failure at Hetzner.”

• Company location Report an error

  “heylogin GmbH is based in Braunschweig.”

• ISO 27001 Report an error

  “The ISMS of heylogin GmbH is ISO 27001:2022 certified”

• GDPR Report an error

  “heylogin is fully GDPR-compliant, relying exclusively on European sub-processors.”

• Security contact Report an error

  “Contact our Information Security Officer (ISO) for questions about heylogin's security architecture: security@heylogin.com”

• Browser extensions Report an error

  “Google Chrome install now Mozilla Firefox install now Safari install now Microsoft Edge install now”

Scores citing this record

• The CISO Encryption model & independent audits
• The CISO Sharing, roles & recovery
• The CISO Hosting choice, offline access & export
• The CISO European sovereignty
• The CISO Encryption model & independent audits
• The CISO Sharing, roles & recovery
• The CISO SSO, directory sync & provisioning
• The CISO Hosting choice, offline access & export
• The CISO European sovereignty
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor Sharing, roles & recovery
• The Compliance Auditor SSO, directory sync & provisioning
• The Compliance Auditor Hosting choice, offline access & export
• The Compliance Auditor European sovereignty
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor Sharing, roles & recovery
• The Compliance Auditor Hosting choice, offline access & export
• The Compliance Auditor European sovereignty
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Sharing, roles & recovery
• The DevOps Engineer Hosting choice, offline access & export
• The DevOps Engineer European sovereignty
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Sharing, roles & recovery
• The DevOps Engineer SSO, directory sync & provisioning
• The DevOps Engineer Hosting choice, offline access & export
• The DevOps Engineer European sovereignty
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer Sharing, roles & recovery
• The Identity Engineer SSO, directory sync & provisioning
• The Identity Engineer Hosting choice, offline access & export
• The Identity Engineer European sovereignty
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer Sharing, roles & recovery
• The Identity Engineer SSO, directory sync & provisioning
• The Identity Engineer Hosting choice, offline access & export
• The Identity Engineer European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic Sharing, roles & recovery
• The Skeptic SSO, directory sync & provisioning
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic Sharing, roles & recovery
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The SME Owner Encryption model & independent audits
• The SME Owner Sharing, roles & recovery
• The SME Owner SSO, directory sync & provisioning
• The SME Owner Hosting choice, offline access & export
• The SME Owner European sovereignty
• The SME Owner Encryption model & independent audits
• The SME Owner Sharing, roles & recovery
• The SME Owner SSO, directory sync & provisioning
• The SME Owner Hosting choice, offline access & export
• The SME Owner European sovereignty