Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Quicken has a password-protection option where you type in a password and your file is encrypted. How good is this encryption and how does it depend on the length or complexity of my password?

A google search reveals a lot of "quicken password recovery" programs, like this one, which make me feel like the password is just for keeping the really dumb criminals away, not the ones with large computers.

share|improve this question
add comment

2 Answers

up vote 3 down vote accepted

SANS did a study and rated it very low. http://www.sans.org/reading_room/whitepapers/casestudies/personal-financial-information-safe-practical-lessons-quicken-password-vulnerabilities_704

share|improve this answer
    
That's a great report! (bad for Quicken, apparently they suck). But, they are analyzing Quicken 2000. Is there a similar report for Quicken >= 2008? –  jmvidal May 14 '10 at 21:52
    
Search the Quicken site for a link to a tool to have you send your data file to them to remove the password. Fundamentally, any time someone can remove your password, it is inherently breakable by design. Sorry, I tried to imbed the link, but it keeps breaking. –  Blackbeagle Aug 10 '12 at 19:32
add comment

I wouldn't rate it as very secure, simply because I don't know how it's being encrypted.

Better bet would be to create a TrueCrypt volume and store your Quicken file in there.

share|improve this answer
2  
+1 for rejecting security by obscurity. :) –  Broam May 14 '10 at 19:55
3  
@Idigas: TrueCrypt is an open-source product using known public algorithms and approved by many crypto hackers, including Schneier, the chuck norris of cryptography. –  grawity May 14 '10 at 20:34
    
+1 True Crypt!!! Easy to use, and Cross platform –  Urda May 14 '10 at 21:15
    
Yes, I am doing something similar: re-encrypting the file myself. But, I am still wondering how good quicken is by itself and if anyone has looked at this. It is so popular that someone must have examined it, right?!? –  jmvidal May 14 '10 at 22:03
1  
@jmvidal: Not necessarily. I don't trust Microsoft Word document locking either, specifically because no one has looked and seen how it's working. Encryption is a special process that must be done right to avoid any security issues. –  Josh K May 15 '10 at 17:53
show 3 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.