Encryption

Encryption


Scribble Maps enables you to save your maps with encryption. You can use encryption when saving maps to:

  • Our servers.

  • Offline machines.


Warning: The encryption feature is serious encryption. If you forget your password, we cannot help you get access to your data. There are no exceptions.



Description of access to an encrypted map


Scribble Maps uses the military standard AES-256 with a PBKDF2 key.


The encryption process is executed on your machine. The encryption password never comes to our servers. When the encrypted map data is saved to our servers, we have no way to access the data.

When you want to retrieve the map, the encrypted data is first returned to your machine. The data is then decrypted on your machine. You will need to provide your encryption password every time you want to access the map data.


Double authentication

There are two steps required to access the encrypted map data.


First, you will need to load the map by either:

  • Providing the map password.

   OR

  • Logging-in to an account that has viewing rights for the map.


Second, you will need to provide the encryption password.



Considerations when encrypting a map


Previously saved maps

You can only save a map with encryption if you have not previously saved with another method (public, unlisted, or secure). Change the Map Id to create a new map that can be saved with encryption.


File formats and images

When a map is saved with encryption, you will lose access to certain features, such as:

  • Downloading to different file formats.

  • Generating images.


The reason these features are disabled is we cannot access the encrypted data on our servers. Therefore we cannot generate the file formats and images.


You can generate an image from your browser by clicking on “Print”.


Auto-save

Auto-save is disabled for encrypted maps. Make sure that you always save your map before closing your browser.


Map histories

When loading previous map versions, you will need to use the encryption password you used to encrypt the map version.


Manage Users for shared maps

When you want to share an encrypted map, we recommend you use the Manage Users feature when saving. The Manage Users feature enables you to list who has access to the map. If you do not use the Manage Users feature, users who you want to access the map will need to provide two passwords:

  • Map password to load the encrypted map data.

  • Encryption password to decrypt the map data.


If you use the Manage Users feature, the users who log-in to their accounts will be able to load the encrypted map data without providing the map password. The user will then only have to provide the encryption password.


Regardless of whether you use the Manage Users feature, you will need to share the encryption password with the users who you want to view the map. Be careful when sharing the encryption password. When sharing encryption passwords, we recommend using a service like https://www.lastpass.com/.


Since we use double authentication via account/secure password, an encryption password being leaked doesn't necessarily mean the map data is compromised. An attacker will need to get both the map password and the encryption password to get to access the map.


We highly recommend you use the Manage Users feature, so you will not need to share the map password. By using the Manage Users feature, users are required to log-in to our service to gain access to the encrypted map data.



How to encrypt a map


Online saving

Select the Menu button on the top menu bar.


Under the Scribble Maps heading, click Save Map.


Select the radio button: Encrypted.


Recommended - If you are sharing the map, click on the button: Manage Users. Type-in the user data, and click: Back to Map Save.


Click on the Save button.


When prompted, type-in the password. Click: Submit.



Offline saving

Select the Menu button on the top menu bar.


Under the Scribble Maps heading, click Offline Save.


A prompt will ask: Encrypt Data?


Click: Yes.


When prompted, type-in the password. Click: Submit.


A prompt will state: Encryption Complete.


Click: Download.


Note: To upload the map later, you will need to type-in the password when using the menu feature: Offline Load.




Feedback and Knowledge Base