Please add an option for database encryption

Have a suggestion for "Everything"? Please post it here.
Post Reply
FoxSpirit
Posts: 2
Joined: Sun Dec 19, 2010 1:52 pm

Please add an option for database encryption

Post by FoxSpirit »

Hi

Well, I'm a pretty security conscious guy so for me it would be a great option to encrypt the database. And I think I'm not alone, actually ;)
therube
Posts: 5056
Joined: Thu Sep 03, 2009 6:48 pm

Re: Please add an option for database encryption

Post by therube »

I don't believe the database .db need necessarily exist at all.
The program reads the MFT, so even without the .db, anyone with Admin rights, i.e., they can run Everything, would still be able find "everything".

Suppose there could be some sort of "password" prompt to open the program itself (& there may be third party apps to password protect an .exe). Or you could set up a "common" shortcut to everything that is limited to only "safe" searches, i.e. only locations you have allowed (Everything Options | Exclude). And then have another shortcut for yourself, one without such limitations.
moooooon
Posts: 2
Joined: Tue Jun 30, 2015 5:14 pm

Re: Please add an option for database encryption

Post by moooooon »

My 2c: Everything.db can be a target for malwares as it contains a considerable amount of private information. So, encryption is a good idea.
horst.epp
Posts: 1456
Joined: Fri Apr 04, 2014 3:24 pm

Re: Please add an option for database encryption

Post by horst.epp »

moooooon wrote:My 2c: Everything.db can be a target for malwares as it contains a considerable amount of private information. So, encryption is a good idea.
There is no private data, just files names and pathes.
Everyone can find this information without using Everything if he has access to your system.
If you realy paranoid you can store the whole Everything on an encrypted partition.
void
Developer
Posts: 17155
Joined: Fri Oct 16, 2009 11:31 pm

Re: Please add an option for database encryption

Post by void »

I understand your concerns about security.

I will consider an option to encrypt the database.

For now, save the database to a Truecrypt volume (or other encrypted volume).
You can set the database location in Tools -> Options -> Indexes -> Database location.

Please note that while Everything is running, any app can query Everything for a list of results via IPC, (or ListView Messages in the next release).
I'll look into an option to disabling these for the next release.

The Everything service can also be used to index a NTFS volume by any app.

For the best security use folder indexing, don't run Everything as an admin and disable the Everything service.
With folder indexing Everything can only see files and folders that any other app can see.
moooooon
Posts: 2
Joined: Tue Jun 30, 2015 5:14 pm

Re: Please add an option for database encryption

Post by moooooon »

Thanks void, next release will be awesome!
Post Reply