Security

Attack Vectors

Offline attack against encrypted container

An attacker may gain access to the encrypted container, perhaps through server backups, a cached copy stored on a client machine, or by accessing the site from a web browser configured to automatically log in. In this case, security relies on the attacker's ability to brute force the passphrase given the chosen number of rounds of PBKDF2. Choosing a good password exponentially improves this security.

Compromise of client

Using JSWallet Securely