Yadda Password Manager Ke Rufe Bayananku da Zero-Knowledge

A duniyar yau da komai ke komawa ta yanar gizo, kiyaye kalmomin sirri ya zama babbar kalubale ga kowa. Mutane da dama suna amfani da aikace-aikacen password manager domin adana sirrikansu, amma shin ka taba yin tunanin yadda wadannan manhajoji ke kare bayanka ba tare da su da kansu sun san me kake adanawa ba? A nan ne makullin fasahar 'Zero-Knowledge Architecture' ke shigowa gaba. Wannan dabarar tana tabbatar da cewa kai kadai ke da ikon bude vault dinka, yayin da kamfanin da ke samar da sabis din bashi da wata hanya ta ganin kalmomin sirrinka koda kuwa ana barazanar yi musu keta haddi.

Menene Fasahar Zero-Knowledge a Tsaron Yanar Gizo?

Tsarin zero-knowledge yana nufin cewa mai samar da sabis na password manager bashi da wani bayani ko kadan game da ainihin abin da ka adana a cikinsa. Maimakon tura kalmomin sirrinka kai tsaye zuwa uwar garke, manhajar tana boye su ne tun a kan wayarka ko kwamfutarka (watau client-side encryption).

Idan har masu satar fasaha suka samu nasarar kutsa kai zuwa uwar garken kamfanin, ba za su samu komai ba face lambobi a chakude wadanda ba su da amfani.

Yadda PBKDF2 da AES-256 Ke Aiki Wajen Kariya

Domin gina wannan ingantaccen gidan tsaro, ana amfani da manyan dabarun lissafi guda biyu wadanda sune ginshiƙin kusan kowane master password:

1. Tsarin PBKDF2 (Sarrafa Babban Password)

Lokacin da ka kirkiri babban password dinka, tsarin PBKDF2 yana amfani da shi wajen samar da wani makulli na musamman. Yana maimaita wannan tsari har sau dubbai domin sanya shi yin nauyi, ta yadda kwamfutocin masu katsalandan ba za su iya hashashen makullin ba cikin sauki.

2. Encrypting din Bayanai da AES-256

Bayan an kirkiri makullin daga babban password dinka, ana amfani da fasahar AES-256 wajen rufe dukkan bayanan da ke cikin vault din. Wannan tsari na bukatar lokaci da karfin kwamfuta mai tarin yawa kafin a iya warware shi ba tare da ainihin makullin ba.

Mene Ne Ke Faruwa Idan Ka Manta Babban Password Dinka?

Saboda ingancin tsarin zero-knowledge na gaskiya, babu wani madatsa na 'Reset Password' ta hanyar imel kamar yadda sauran shafuka ke yi. Idan ka manta babban password dinka da kuma lambobin dawowa (recovery keys), dukkan bayanka sun bata kenan har abada. Wannan shine farashin da ake biya domin samun cikakken tsaro mara keta haddi.

A karshe, fahimtar yadda password manager ke kare bayanai yana baka kwarin gwiwar amfani da fasaha ba tare da tsoron satar sirri ba. Tabbatar da cewa ka zabi tsarin da ke amfani da cikakken rufin encryption a kan na'urarka domin tsare mutuncinka a yanar gizo.

Shin kana amfani da irin wadannan manhajoji na tsaro, ko kuwa har yanzu a kai kake rike kalmomin sirrinka? Bayyana muna ra'ayoyinki a sashen sharhi!