Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Quicken has a password-protection option where you type in a password and your file is encrypted. How good is this encryption and how does it depend on the length or complexity of my password?

A google search reveals a lot of "quicken password recovery" programs, like this one, which make me feel like the password is just for keeping the really dumb criminals away, not the ones with large computers.

share|improve this question
up vote 3 down vote accepted

SANS did a study and rated it very low.

share|improve this answer
That's a great report! (bad for Quicken, apparently they suck). But, they are analyzing Quicken 2000. Is there a similar report for Quicken >= 2008? – jmvidal May 14 '10 at 21:52
Search the Quicken site for a link to a tool to have you send your data file to them to remove the password. Fundamentally, any time someone can remove your password, it is inherently breakable by design. Sorry, I tried to imbed the link, but it keeps breaking. – Blackbeagle Aug 10 '12 at 19:32

I wouldn't rate it as very secure, simply because I don't know how it's being encrypted.

Better bet would be to create a TrueCrypt volume and store your Quicken file in there.

share|improve this answer
+1 for rejecting security by obscurity. :) – Broam May 14 '10 at 19:55
@Idigas: TrueCrypt is an open-source product using known public algorithms and approved by many crypto hackers, including Schneier, the chuck norris of cryptography. – grawity May 14 '10 at 20:34
+1 True Crypt!!! Easy to use, and Cross platform – Urda May 14 '10 at 21:15
Yes, I am doing something similar: re-encrypting the file myself. But, I am still wondering how good quicken is by itself and if anyone has looked at this. It is so popular that someone must have examined it, right?!? – jmvidal May 14 '10 at 22:03
@jmvidal: Not necessarily. I don't trust Microsoft Word document locking either, specifically because no one has looked and seen how it's working. Encryption is a special process that must be done right to avoid any security issues. – Josh K May 15 '10 at 17:53

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .