Quote:
Originally Posted by rockman
Can someone answer this question about Tutanota in detail, please?
|
Hello, Tutanota team here. We have
no access to passwords and passwords of free accounts cannot be reset.
With Premium accounts, this will be different. The administrator can add users (ie employees) for his domain. All user keys are encrypted for the user with the user's password AND for the administrator with the administrator's public key. Now, if the admin wants to reset a password, he can decrypt the key and then re-encrypt it with the new user's password he defines. This way, he has access, but we as the provider have not.
This is a simplified description. We will soon publish a Security Whitepaper with more details.