Frequently Asked Questions (FAQ) List

CryptoWeb is completely optional. We hope you find a great deal of value to having online editing and backup for your data, however, you do not have to subscribe to CryptoWeb to use Crypto Lists. The first time you start up Crypto Lists, you will be prompted to fill in a registration form. You must fill in this registration form, though you do not need to give a valid E-mail address. Once the initial registration form is filled in, you can disable synchronization as described below.

The Crypto Lists change log is available here.

On the browser selecting text is the same action as dragging and dropping.  Namely, you hold down the mouse button and move the mouse pointer.  This is different than the hand held device where you have to hold down the shift key while selecting.  In order to distinguish between select and drag, the browser version of the app uses the concept of an "edit mode".  When you click on a text area the text area has focus and is in edit mode.  When the text area is in edit mode, the app interprets the mouse down and move as a select operation only and you can not drag text.  Note that when the text area has focus, most browsers put a small box around or highlight the text area. 

What this means is, if the text area is highlighted (has a little box around it) before you click to drag, it will only select text and not drag.  You will first have to click on some other part of the browser page; other than the frame.  Once the text is not highlighted/focused, you can put the mouse over the text, hold down the left mouse button, and drag the text to the correct position in the list.  Notice that when you first mouse down, the browser will highlight the text area.  This is OK since edit mode starts after the mouse button is released.

The following browsers have been tested:

• Firefox 3.5.8, 3.6.12, and 4.0.1
• Internet Explorer 7, 8, and 9
• Safari 5.0.1
• Chrome 7.0.517.44

Internet Explorer 6 does not work and is not supported. For Internet Explorer 6 users, we suggest the Firefox browser as an alternative. Firefox is available for free download at www.mozilla.com/firefox.

There can be a lag between supporting a new language in Crypto Lists and Crypto Web. There can also be a lag between supporting a new language in the dynamic CryptoWeb web application, and the static pages at this site. We thank you for your patience and apologize for the inconvenience as we introduce changes.

The decision to support new locales is based on demand. If you would like to request we support additional languages, please let us know at the contact us page. Unfortunately, we can not guarantee if or when a language will be supported.

Please make your request at the contact us page. Unfortunately, we can not guarantee if or when a feature will be added.

We welcome and encourage bug reports. Please report all bugs at the contact us page. Please include information on how to reproduce the problem as well as a description of the problem.  Some issues may not be considered bugs and some problems may not be reproducible. We will evaluate your report, unfortunately, we can not guarantee there will be a fix for it.

This site makes heavy use of JavaScript. You must enable JavaScript in your browser in order to be able to login and to use the data editing capabilities. Notice, however, that this site does not use cross site scripting. This means you can use plugins such as NoScript as long as you turn on "Temporarily allow top-level sites by default" and "Base 2nd level Domains" in the NoScript options.

There is no way to reocover your data on your hand held device if you forget the passphrase used to encrypt it. Please choose memorable passphrases.

The passphrases are case sensitive. If you think you are using the correct passphrase, make sure you are also using the correct upper or lower case letters. When you create your passphrase, the passphrase dialog defaults to upper case for the first letter. If, on the first time ever you try it, your passphrase is not working, try making the first letter uppercase.

Please see our Terms and Conditions page for details.

You must start by using the Crypto Lists registration dialog on your hand held device. The registration dialog comes up automatically the first time you use Crypto Lists, but if you have already run the registration dialog, you can always run it again. Just bring up the Crypto List application and under the main menu, tap on "Accounts". At the Accounts dialog, enter the E-mail address to be used with your account (if it is not already there). Next tap on the "Setup Account" button. If you have not already setup your account, you will see a confirmation message telling you that an E-mail with setup instructions has been sent to your account. Make sure this E-mail does not end up in your SPAM folder, and follow the instructions in the E-mail to complete your account setup.

If you have already setup your account, you will see a message telling you your account E-mail address has been changed. In this case, tap on the "What's My Login ID" button to find the account name you registered. If you have forgotten your pass phrase, you can follow the pass phrase reset procedures to recover your account.

If you backup your data over USB first, you can restore your data after a hard reset, otherwise you will lose your encrypted data and might lose your un-encrypted data. See the FAQ question on backup and restore for more information.

If you are subscribed to CryptoWeb and run Crypto Lists 1.2.8 or later, you can recover your un-encrypted data by re-registering your device. Note that you must have synced your device at least once while running Crypto Lists 1.2.8 or later. Only data that has been synced can be restored.

To re-register your phone:

1. Start up Crypto Lists on your device. If Crypto Lists was deleted, re-install it.
2. If the account setup dialog is not displayed, then tap the main menu and then tap Accounts. Fill in your E-mail address and name or device nick name and tap the Setup Account button.
3. You will receive an E-mail at the E-mail address you specified containing a setup URL. Click on that URL or copy and paste it into the URL bar of a browser.
4. In the browser window, you will be prompted with a list of login names under which the device has been previously registered. Fill in the web form with the appropriate login name.
5. Enter the password you had previously setup for that login and press the "Create Account" button.
6. Re-start Crypto Lists and allow it to sync.

You should now have your un-encrypted data restored and any previous account billing records will be once again associated with your device.

You add a second device to your account by following the normal setup process using your existing login and password:

1. Start up Crypto Lists on your device.
2. If the account setup dialog is not displayed, then tap the main menu and then tap Accounts. If they are not already filled in, fill in your E-mail address and device nick name and tap the Setup Account button.
3. You will receive an E-mail at the E-mail address you specified containing a setup URL. Click on that URL or copy and paste it into the URL bar of a browser.
4. Fill in the web form with your existing login name and password and press the "Create Account" button..

You should now see multiple devices listed when you click on the "Edit Lists" link in the top tool bar in the browser window. Also, the copy and link actions will now appear under the Edit menu in the second tool bar. These options will also be available when you use the mouse menu button in the list navigation tree on the left side of the browser window.

Please note that subscriptions are on a per device basis. As each device is added, it will have a 15 day trial period. After the trial period, the device will not be able to synchronize with the web site without a subscription.

Device nick names are displayed in the navigation tree on the left side of the browser window. Device nick names are only shown when there is more than one device registered to an account.

The name displayed for the device can be changed using the Crypto Lists application on the hand held device. Start the Crypto Lists application and tap on the main menu, then tap on the Accounts option. In the Accounts dialog, change the "User Name" field and press the "Setup Account" button. You will see the new device nick name the next time you click on the Edit link in the top menu bar in the browser window.

The yearly subscription fee for CryptoWeb is the same price as the Crypto List hand held application (currently $4 USD). Note that the Crypto Lists application price is a one time purchase price and CryptoWeb is a yearly subscription.

You must purchase the Cyrpto Lists application through the application catalog on your hand held device. Start the application catalog and type "Crypto Lists" and tap on the search icon or press enter or click here to go to our Palm application catalog entry.

A free fifteen day trial of CryptoWeb is included with the purchase of Crypto Lists. After the trial period, a small subscription fee is required.

When you sign up for automatic subscription payments, you are not billed until your current subscription or evaluation period ends. You may see a $0 charge for the initial period covering your current evaluation or paid up subscription, and then the actual charge for the next period.

In rare cases, the initial period may have to be broken into two periods with the first period charged $0 and the second period charged $0.01. This is necessary due to restrictions with our payment processor. In these cases, a few extra days may be added to the second period to make up for the $0.01 charge.

You can turn off automatic payments at any time. This will stop any future payments and will not affect your current subscription.

To stop future payments, login to your CryptoWeb account and click on the "Billing" link. If you have signed up for automatic payments, you will see an unsubscribe button. If you have not signed up for automatic payments, there will be no unsubscribe button. To cancle future payments, click on the unsubscribe button and follow the instructions at the paypal web site.

You can also manage your subscriptions by loging in directly to the paypal web site.

Modern desktop computers and Operating Systems are subject to a wide range of attacks. Any of these attacks can be used by criminals to steal any information entered at the computer, including the pass phrase to your CryptoWeb acccount. In order to protect personal information encrypted on your smart phone, we do not expose it to these attacks by storing it on the web.

When you encrypt your data on Crypo Lists, it is automatically removed from CryptoWeb. If your hand held deivce is not connected to the network at the time you encrypt the data, the deletion will happen the next time Crypto Lists and CryptoWeb synchronize.

CryptoWeb turns on SSL encryption from the time you log in to the time you log out. All of your lists and notes transmitted to your web browser are securely encrypted using SSL.

Crypto Lists also uses SSL for all data synchronization with CryptoWeb.

Crypto Lists uses the native encryption algorithm on the hand held device, which is the very popular Blowfish encryption algorithm.

Security questions are generally regarded as a weak form of authentication. Your primary means of authentication (for pass phrase resets and similar operations) is either through E-mail or through your hand held device. CryptoWeb only uses security questions as a secondary means of authentication. For example, if you reset your password through E-mail, you will be prompted with a security question the next time you login.

It is not necessary, however, to remember your security questions since you can reset the security state of your account through your hand held device. This means you can type in random text into the security questions and use your hand held device as the secondary means of authentication. See the Account Recovery section of this FAQ for more details.

First, we suggest using a multi-word passphrase and not just a single word password. You must pick something easy to remember. You could use a part of a favorite song lyric, a mixed metaphore, or part of a famous speach.

The passphrase meter considers not just the length of your passphrase, but also the set of characters used to construct it. When you construct your passphrase from, say, lower case alphabet, upper case alphabet, numbers, and punctuation characters, an attacker must try a much larger number of combinations in a brute force or dictionary attack. If you choose a passphrase using at least one upper case character, one lower case character, one number, and one punctuation character and twelve characters long, the passphrase meter will turn green. The punctuation characters are any of:

!@#$%^&*()_-+=|\~`:;"'<>,.?/[]

and space or tab.

There are two methods to find your login ID:

1. First you can use the Crypto Lists application on your hand held to look up your login ID. Just bring up the Crypto Lists application and under the main menu, tap on "Accounts". At the bottom of the accounts dialog there is a "What's My Login ID" button. Tap on this button to see your login ID.
2. The other alternative is to use the "I forgot my login" link at the bottom of the login page. There you must enter the text for a CAPTCHA test (to prevent automated attacks) and the E-mail address you entered when you setup your account. If you enter the correct E-mail address, your login ID will be sent to you.  For security reasons, if you do not enter the correct E-mail address, your login ID will not be sent and no indication will be given that the E-mail address was not found.

Go to the login page and click on the "I forgot my pass phrase" link at the bottom of the page. There you must enter the text for a CAPTCHA test (to prevent automated attacks) and your login ID. When you submit the form, instructions to reset your pass phrase will be sent to the E-mail address you entered when you setup your account.

You can change the E-mail address for your account from the Crypto Lists application on your hand held device.  Just bring up the Crypto List application and under the main menu, tap on "Accounts". At the Accounts dialog, enter the E-mail address to be used with your account (if it is not already there). Next tap on the "Setup Account" button. When you see the confirmation dialog, the E-mail address for your account will have been changed to the address you entered. Next follow the procedures for resetting your pass phrase above.

Our assumption for anyone trying to obtain a pass phrase manually is that they are trying to illegally obtain this information. We will under no circumstances manually provide an E-mail address, login ID, or pass phrase to anyone, even if you tell us there is a bug in our system or it is an emergency.  If you do find a bug, please report it as described above and it will be investigated. If you have lost your phone, your E-mail address, and your pass phrase, your only option is to hire a legal representative who can prove to our legal department that you are who you say you are, and owned the phone associated with this account and the data it contains.

If you reset you password, or under certain other circumstances, you may be prompted to answer the security questions you setup when you created your account. You can turn off this security prompting state from the Crypto List application on your hand held device. Just bring up the Crypto List application and under the main menu, tap on "Accounts".  At the Accounts dialog, enter the E-mail address to be used with your account (if it is not already there).  Next tap on the "Setup Account" button. When you see the confirmation dialog, you will no longer be prompted for the security questions. Log out from CryptoWeb and Log back in again.