Secret! 2.7

Private is not secure. Keep your data Secret!

Anybody getting access to your handheld can perform a HotSync and read
your private records with a standard hex editor.

To have all your passwords, account information, credit card numbers,
financial data, personal identification numbers (PINs), and even your
on-line banking transaction numbers (TANs) stored in a safe place,
keep them (in) Secret!

Installation And Upgrade

Secret! runs on all Palm Powered&reg; handhelds. Simply download and
unpack the secret.zip archive, and install the enclosed secret.prc
file with the Palm install tool.

You can put the Secret! application (but not its data) into Flash ROM.
If you want to use the desktop synchronization, you should not put
Secret! onto an expansion card.

If you upgrade from a previous Secret! version, don't remove Secret!
before you install the new version. This way your data and
registration code will be retained. If you've put Secret! into ROM
before, make sure you move it back to RAM before installing a new
version.

Left-handed users can use Secret! with either LeftHack or Lefty (but
not both at the same time). Secret! supports the enhanced display of
the Handera 330.

 Your Password

Everything you store in Secret! is encrypted with a single master
password of your choice. This password is used to encrypt and decrypt
your data and only someone knowing this password can access your data.
No back doors, no hidden weakness! If you forget your password, you
will have to erase and re-install Secret! as there's absolutely no way
to get to your data without knowing the password.

Whenever you start Secret! you are presented with an on-screen
keyboard to enter your password. You can choose between a standard
alpha-numeric keyboard and a numeric keyboard (with extra large keys)
if your password only consists of digits. The default keyboard can be
set in the Preferences dialog. You can also enter the password with
Graffiti.

The first time you start Secret! you will have to define a new
password. As a precaution against typos, you must enter the new
password twice. The password can be up to 24 characters long.

Changing The Password

To change your password, enter your old password, then tap on the Menu
button, and select Options - Change Password. To protect against
typos, you have to enter the new password twice. To cancel the
password change, simply leave Secret! by switching to another
application.

If you use Secret! Desktop, please perform a HotSync before and after
changing the password. The double HotSync will ensure that all data is
encrypted with the same password both on the desktop and on your Palm.
If you forgot to hotsync before changing the password and have
modified desktop data, you may end up with a mix of old and new
encrypted data. Secret! will detect categories encrypted with an old
password and will ask you to provide the old password to re-encrypt
them.

 Your Data

The Secret! data screen has the well-known MemoPad style. You can
store anything you like in Secret!, e.g. credit card information,
accounts, on-line passwords, transaction numbers, one-time passwords
and everything else that needs to be kept Secret! We've even heard of
people storing their diary or birthday present lists in Secret!

To avoid accidental changes to very sensitive data you can set the
read-only option by tapping on the Menu button and choosing Options -
Toggle Read-Only. Read-only mode is indicated by (R/O) in the lower
right corner and removal of the dotted lines.

In the registered version you can easily switch the display font by
using the buttons in the lower part of the screen. The Fix font is a
special font with clearly separated characters for 0 and O and l and
1.

You can search in Secret! by tapping on the Palm Find button. Of
course, searching Secret! data only works inside Secret! because all
data is encrypted every time you leave Secret! Search is not
case-sensitive and will find arbitrary sub-strings. Wildcards (*,?)
are not supported.

Categories

As you store more and more information in Secret!, you may want to
structure your data in categories. A single category is comparable to
one memopad record and may contain up to 6000 characters. Each
category can be independently set to read-only or TAN/OTP mode.

Categories can easily be managed in the Edit Categories screen,
available from the category pull down menu. In contrast to the
standard Palm applications, Secret! supports an unlimited number of
categories.

You can either arrange categories in an arbitrary order (using the
up/down arrow buttons) or select an alphabetically sort order. If you
use Secret! Desktop you may want to select the alphabetical sort order
to match the desktop order.

Preferences

To configure various settings of Secret! tap on the Palm Menu button,
then choose Options - Preferences.

You can have Secret! automatically close the text screen and encrypt
all data after a certain time of inactivity. This works in addition to
the built-in auto-close at power-off. Data is always encrypted when
the handheld powers off, when you switch it off manually, or when you
change to another application.

To increase security against someone trying various passwords, you can
configure Secret! to remove all data after a certain number of wrong
password attempts. If the data is removed, it can only be restored by
synchronizing with the desktop.

If your password consists only of digits you can choose to start
Secret! always with the Digits screen. Note that this makes it easier
for someone trying to break your password because they can assume that
you use only digits.

Secret! can open your text screen automatically when you have
completed your password, thus saving you the extra tap on OK. Note
that this makes it slightly easier to guess your password because one
does not need to know the length of the password.

To increase security, you can configure Secret! to clear the clipboard
after pasting text. Note that this may not work if you have
third-party clipboard hacks installed.

To make the Secret! application inconspicious, you can change the icon
and title of Secret! that is displayed in the launcher. The icon title
must not be empty. This will only affect the display in the Launcher
and in the Info and Delete dialogs. It does not change the database
name. Title and icon are changed by patching the program. If you have
Secret! stored in FlashROM, this feature will not be available. With
some third-party launchers you may need to perform a Soft Reset (enter
pin into reset hole at back of unit) so that the launcher gets
notified about the new icon/title.

Backup

Data stored in Secret! is probably very important to you. Make sure
you have a current backup available in case your handheld is lost or
breaks down. The backup is always encrypted, so there is no danger if
someone gets access to the file.

If you use Secret! Desktop, the provided conduit will store a
synchronized copy on your desktop in the directory \palm\\secret
(where is derived from your Palm user name).

If you do not use Secret! Desktop, the standard system conduit will
back up all the Secret! data as all other third-party data to
\palm\\backup\secret2.pdb. Please make sure to have hotsync configured
to System: Handheld overwrites Desktop (which is the default) to
activate this standard backup functionality. LinkeSOFT recommends
using BackupBuddy for a complete and reliable backup of everything in
your handheld.

If you had to hard reset your device or otherwise lost your Secret!
data simply install the file secret2.pdb together with Secret! to
restore the last backup.

It's a good idea to once in a while make additional backup copies of
the secret directory or the file secret2.pdb, respectively.

Expansion Cards

Secret! supports moving the Secret! database to an expansion card
(SD/MMC, CF or MemoryStick). The main application of this feature is
not saving memory, but rather added security. If you have your data on
the card and remove the card, the data is no longer in your handheld
and can't be accessed even if someone knows your password.

To move data from/to an expansion card, insert a card and select menu
Options - Expansion Card. You should not remove the card before you
leave the Secret! application.

Because of Palm OS limitations, data on an expansion card is not
synchronized during HotSync.

 TAN/OTP Mode

Are you into on-line banking? Do you use transaction numbers (TANs) or
other one-time passwords for secure authorization? Secret! has a
special built-in TAN mode that makes using TAN lists easier than ever.

Enter your list of TANs line-by-line into a standard category, then
switch to TAN mode using the menu Option->Set TAN mode. Now you can
use the TANs one-at-a-time. If a TAN is used, tap on the Delete button
and the first entry will be erased from the list. You can undo the
last removed entry. To prevent accidental changes, new TANs can only
be entered in standard mode.

Below the list, you can enter addition information, e.g. account data.
In normal mode, this text is separated from the TAN list by an empty
line.

 Registration

Secret! is shareware and must be registered for a shareware fee when
you decide to keep it. Please register Secret! for just US$ 19 or
Secret! and Secret! Desktop as a bundle for just US$ 35.

Registered users will receive support and free program updates. Please
contact us at sales@linkesoft.com for volume discounts and site
licenses.

 Version History

- 2.7 - additional fix font with clearly separated characters,
  expansion card support, support for extended screen of Handera-330,
  option to erase all data after several wrong password attempts, info
  area in TAN/OTP mode (contains all text after blank line), various
  smaller bug fixes and enhancements
- 2.6 - option to always start with first category, improved
  auto-close, even if on-screen keyboard or system dialogs are shown,
  improved password entry screen, longer password of up to 24 char,
  thus reaching the whole 128 bit key space, improved TAN mode with
  Undo functionality, various smaller bug fixes
- 2.5 - scrollbar for text field instead of arrows, option to change
  icon and title in launcher, option to open when password complete
  (saves one tap on the OK button), improved close on power off (will
  now close the text screen in most situations), button to delete last
  character on password screen, bug fixes
- 2.4 - bug fixes, option to sort categories alphabetically (like
  Secret! Desktop), menu item to generate a random password
- 2.3 - search functionality, support for Secret! Desktop, one more
  display font
- 2.2 - bug fixes, read-only mode per category, support for
  PadlockHack, large bold Font on Palm III
- 2.1 - first public shareware version

Copyright (C) 1998-2001 LinkeSOFT GmbH, Berlin, Germany

License
-------

This license agreement settles the relation between LinkeSOFT GmbH and the 
user concerning the use of the enclosed software product ("program") of
LinkeSOFT in its shareware version and its registered version.

 1
The user obtains through this license by LinkeSOFT the non-exclusive 
right to install and use this program on his PalmPilot.
The program remains the sole property of LinkeSOFT.
The user further obtains the right to make a back-up copy by means of 
the HotSync feature.

 2
The user may distribute the shareware version of this program or copies 
thereof. The shareware version may be published on the Inter- or 
Intranet or on software collections (on CDs etc.).
Each distribution must contain these provisions and the above copyright
notice. Except for publishing on software collections the distribution 
of this program has to be free of charge.
The program name or the name of LinkeSOFT shall not be used for
promotional purposes without prior written consent of LinkeSOFT.
The program may not be modified or tampered with in any way.

 3 THIS SOFTWARE IS PROVIDED BY LINKESOFT GMBH ''AS IS'' AND ANY 
EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL LinkeSOFT BE LIABLE FOR ANY 
DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 
OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 
STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN 
ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 
POSSIBILITY OF SUCH DAMAGE.

 4 For regular use the program has to be registered according to the 
general rules about shareware. Registration is made by payment of the 
registration fee according to the program and web site instructions. 
After registration the user receives a key that entitles him or her to 
unrestricted use of the program according to this license. Registration 
further entitles the user to get support by LinkeSOFT via email and free 
upgrades of this program.

 5
The user shall in no way make copies of the registered version of this
program, except such as coming under  1. The user shall in no way 
resell or lend the registered program or copies thereof to third persons.
The registered program may not be made available to third persons.

 6
In the event that any provision of this Agreement should be or become 
invalid or if there is a gap in the Agreement, the validity of the other 
provisions shall not be affected. In lieu of the invalid provision or in 
order to complete the Agreement, a reasonable provision shall be 
effective approaching to what parties would have agreed upon if they had 
considered that issue.

 7 This Agreement shall be governed and construed in accordance with 
German law as it applies to German citizens and corporations and the 
parties hereby agree to submit to the exclusive jurisdiction of the 
courts of Germany. The place of proceeding will be Berlin.

 8
This software program is protected by international copyright law.

Palm, the Palm logo and Graffiti are registered trademarks,
and HotSync, PalmPilot, Palm OS and the PalmPilot logo are trademarks of
Palm, Inc.
