Lockbin Notes

Lockbin Update released today

Fri, 12 Apr 2013 16:37:56 -0500

We’ve released version 2.1 of the Lockbin.com web app. We’ve fixed bugs reported by users and discovered by testers, and added a few features. The message interface was streamlined, and you can now change your email address.

We are also releasing an update to the Lockbin add-on for MS Outlook. We’ve improved how Lockbin add-on works in Outlook 2013, particularly with “inline messages.”

Auto-Activation of the Lockbin Outlook Add-on

Lockbin will now turn itself on by default when you reply to an email message that is in Outlook’s “Lockbin Inbox.” We did this as a precautionary measure, to help reduce the risk that users might forgot to activate the Lockbin add-n when replying to a sensitive message. In Outlook 2013, with inline messages and with the way that Outlook will hide toolbars, we felt that the chance was too high that users might forget to activate Lockbin. We also believed that if users were replying to a message that had already been sent through Lockbin that there would be a very high likelihood that the reply message should be encrypted.

These improvements are now live. The latest version of the Outlook add-on can be downloaded from Lockbin.com

Update on the Lockbin Android app.

It’s taken us longer than we thought to complete this project, but the app is in testing. Deploying Lockbin.com 2.1 puts in place the infrastructure we need to support some unique features of the add-on. The latest beta now supports Android 2.3 through 4. If you are fairly technical and would like to test it, Tweet us at @lockbincom

Our sister product, PDF Postman, was highlighted in InfoSecurity magazine. Check out the article.

Fri, 12 Apr 2013 16:25:30 -0500

Our sister product, PDF Postman, was highlighted in InfoSecurity magazine. Check out the article.

How To Check The Status of Lockbin Notification Email Messages

Mon, 18 Mar 2013 15:51:00 -0500

Sometimes customers will contact Lockbin support because their notification email messages have not been received by the recipient. There could be various reasons for this.

Sometimes, despite our best effort, the notices may end up in the recipient’s junk mail box. This is typically easy to resolve when the recipient checks their junk folder, and then adds Lockbin.com to their safe sender’s list.

However, by far the most common reason a notification message is not delivered is because the email address is misspelled (about 80% of the time we follow up, this is the reason). There may be other reasons, which is why we’ve given Premium users a window into the delivery process. By clicking “Message Status” from the Premium user toolbar, and then locating the message in question, you can find more details that may be helpful.

If the status reads, “Notification Error,” clicking the red message will provide more details.

In this case delivery was prevented because of a bad email address. The reply message from the email server is parsed and made available to you so that you can be informed if there is a problem and take appropriate action.

Sometimes notification messages are grey listed. This is a spam fighting technique used on some email servers. Grey listing requires our email server to work harder to deliver the message. Since most spam servers will not attempt to re-deliver a message, Lockbin is usually successful in these situations. We will try up to 3 days to deliver the notification. Typically this is enough to convince the mail server that we’re legit and future emails usually are delivered without incident.

A few email servers will send us a message requiring entry of a captcha message, or a manual white listing registration process. We look for and respond to these messages manually. Because it is a manual process, It may take us up to 12 hours to find and dispatch these requests.

The vast majority of Lockbin’s notification emails (98%) are delivered promptly and without incident. The last 2% present a challenge for us and Lockbin users, but that’s also is reflective of the nature of the broader challengers facing email delivery today. But we can overcome 80% of the problem just by being a little more careful as we type the recipient’s email address..

An Outlook Email Encryption Solution for CPA’s: Protecting Client’s Sensitive Information

Sat, 16 Mar 2013 14:09:00 -0500

A CPA is using Microsoft Outlook to correspond with a major client. An important tax document is needed to complete the client’s company’s tax return. The client apologizes for forgetting the file, and casually offers to email this information to the CPA immediately.

While many people might just let such an incident pass unnoticed, this CPA recognizes that sending sensitive documents through email is a bad idea. Unencrypted email messages are an unsecured way of communicating. While the expectation of the parties involved is that the message will privately transit the internet, the fact is that every unencrypted email message is at risk for interception. In situations where an email may include personally indentifiable information or patient health information, laws like HIPAA and HI-TECH can impose stiff penalties for breaches.

In the situation just described, Lockbin is a service that offers the CPA a reasonable and proactive process for receiving the client’s information securely. The CPA tells the customer not to email the information to him by email. Instead, the CPA will initiate a special request for the information that will allow it to be sent securely. He tells the client to watch his email inbox for the Lockbin Information Request email that will arrive momentarily.

To initiate the information request email, the CPA locates the Lockbin toolbar on Outlook’s main menu. He clicks “Send Request.” Lockbin opens a window to collect the client’s email address. The CPA can enter a special message to the client that will be visible within the email message.

Lockbin generates a special page on Lockbin.com that the client will visit over a secure TLS connection. From this secure page, the client can type a message and attach files for the CPA.

After the client sends the message, Lockbin will encrypt the contents with a public key that is associated with the CPA’s account. Within minutes, the files will be transmitted securely to the CPA’s Outlook inbox. The documents have been delivered securely, and the process was effortless. The client did not need to download and install any special software, nor did the client need to devise a password.

Information Request is one of the basic functions built into the Lockbin messaging platform. While the technology behind the request is complex and NIST FIPS verified, the front end of the process is simple for both the CPA and his client.

Information requests is one of the premium features of Lockbin. It’s also available directly from the Lockbin.com web application, and works very similar online as it does in the Microsoft Outlook environment.

For more information about Lockbin and how it can help your business receive, send and request information securely over the internet, visit Lockbin.com

Lockbin upgrades servers

Tue, 29 Jan 2013 20:11:30 -0600

Our new servers went online tonight! We hope the improvement is as noticeable to you as it is to us! Congrats to Velja and Giorgi who worked hard to make the transition to our new facility seamless and perfect.

Lockbin is now physically located at a centrally located, environmentally friendly secure facility in Lenexa, KS operated by 1&1, with 24/7 monitoring, backup generators, restricted physical access, and great connectivity.

Is there a size limit to files that can be uploaded with the free version of lockbin?

Fri, 18 Jan 2013 14:40:13 -0600

The file size limit for the free version of Lockbin is 15 MB. One attachment is allowed.

For Premium users, up to 20 files are allowed, for a total file size of 100 MB.

can my ip address be traced back to me

Fri, 18 Jan 2013 14:36:55 -0600

Yes, your IP address can always be traced back to you. Your ISP probably keeps records for six months or more. Lockbin also logs IP addresses of users. We typically keep them for up to 90 days, but we may delete them sooner. We use these records to help us understand web traffic to our site, and to also will use this information to help defend against various attack vectors to our website. We do not try to identify you personally by your IP address. If we were forced to turn over our server logs to a legal authority, they may be able to trace your IP address to you personally (even though we can’t).

Lockbin isn’t primarily focused on providing anonymity to its users. We are focused first on end-to-end security for your message in a manner that is HIPAA compliant and allows our customers to claim a safe harbor in the event of a breach.

Lockbin is not an anonymous mailing service, even though we do allow anonymous users to try Lockbin.

Well known ways to surf the internet anonymously include using a web proxy, or the TOR network. TAILS Linux is a bootable CD that encourages secure web browsing by integrating tightly with security privacy software (including TOR). A copy of TAILS that will boot up a PC can be purchased from Osdic.com for a few dollars.

The privacy benefit of using Lockbin is that you are in control of your keys. We cannot access your content, and there is no backdoor through which we can retrieve your keys. We do not monitor your content. If you use secure passwords and keep them private, then your information is well secure.

We just found this! Thanks, you guys really made our day today!...

Fri, 04 Jan 2013 08:53:46 -0600

We just found this! Thanks, you guys really made our day today! We love you, too.

Announcing MessageLock Integration to Lockbin

Thu, 03 Jan 2013 06:18:54 -0600

Since 2006, Outlook email users have been encrypting their email messages and files with MessageLock, an add-in developed by our parent company, Encryptomatic LLC. We’re happy to announce that Lockbin has been fully integrated to MessageLock with the release of version 2.0. Welcome Lockbin users! We’re glad you’re here! You can now choose to use the Lockbin service as one of the encryption encryption algorithm options with MessageLock.

When MessageLock routes a message through Lockbin.com, your computer makes a secure TLS/SSL connection directly to our server. The message is not sent through your regular email account. Lockbin holds your message until the recipient claims it with the password.

If you are sending to someone else who is using MessageLock with Lockbin, or someone using the dedicated Lockbin add-in for Outlook, your email messages are downloaded directly to Outlook. This makes it really easy to setup a secure email connection with someone while retaining Outlook as the familiar context for your messages.

The Lockbin integration with MessageLock supports both free and premium Lockbin accounts. Anonymous usage is not supported at this time.

MessageLock works with Outlook 2013, 2010, 2007 and 2003. Both 64-bit and 32-bit versions of MessageLock are supported. This image shows Lockbin integrated to MS Outlook 2010 toolbar.

Follow this link to learn more about MessageLock and to download a free trial.

The "Nothing to hide" argument

Thu, 27 Dec 2012 09:46:26 -0600

We at Lockbin have been and remain ardent supporters of the right to personal privacy. We have long supported the Electronic Frontier Foundation’s efforts to protect privacy rights on the internet.

One of the most effective arguments against privacy goes something like, “I don’t have anything to hide, so I don’t care about privacy.” Or, “Privacy is only for criminals.” Daniel Solove does an excellent job debunking these anti-privacy arguments in his essay, which is worth the read. He outlines a useful taxonomy for understanding privacy issues while having the debate.

One of the most peculiar aspects to the privacy debate is the requirement from the U.S. government (through HIPAA and HI-TECH laws) that healthcare providers protect patient health information (PHI). There are severe penalties for failing to do so.

Yet, when it comes to a discussion about personal privacy (i/e protecting our own information) the debate will often be flipped to, “What do you have to hide.” After all, if we have nothing at all to hide, then perhaps our personal health records should simply be in the public domain.

People who have nothing to hide are exactly the people who should proactively hold their privacy close. Even mundane details Nothing to hide does not mean nothing to lose. Even mundane email communications can inadvertently give away important details about your job, your relationships and associations, your current or intended whereabouts, your beliefs and propensities. While you may not have anything to hide from the government, in the hands of criminals this information could potentially harm you.

Lockbin is pleased to provide a platform that puts you in control of your privacy and conforms to HIPAA regulations. What you do with your privacy is your own business. Neither surrender it lightly nor let anyone make you feel guilty for demanding it.

Lockbin Desktop Upload Software Update is Available

Wed, 14 Nov 2012 12:33:50 -0600

The Lockbin Desktop uploader is a free Java application that lets you send secure messages and files through Lockbin.com.

Version 1.5 of the Uploader has been released, and is a recommended update for all users. You can download it at https://lockbin.com

Service will be discontinued to the older software, so please update to version 1.5.

Lockbin 2.0 Is Released.

Thu, 08 Nov 2012 09:36:00 -0600

We are pleased to announce that Lockbin 2.0 has been released. Here are some of the changes you will find.

Improved support for IOS and Android file uploading. The Lockbin.com web application now has improved support for receiving files from IOS and Android devices. IOS poses specific challenges that are inherent to the OS. To better upload files, we recommend downloading an app called iUploader. In our tests with an IOS6 device, iUploader worked well with Lockbin, and allowed us to upload many different file types from our device. Without iUploader, we were only able to upload image files. Android users should not have this problem, as Android OS provides access to the file system.

Enhanced support for Public Key Encryption

We have improved integration with PKE for both the web application and the Outlook add-in. The net result is that password invention will be required in many fewer instances, making Lockbin even easier to use for both senders and receivers of messages. For premium Lockbin users who have enabled public key messaging for their account, in many cases no password will be necessary when sending and receiving. For example, a premium user with PKE enabled can receive messages from anyone without a password requirement. Premium users can send a message to any Lockbin user (free or premium) who has enabled PKE without a password.

Enhanced functionality for Outlook add-in

Numerous improvements were made to the Lockbin add-in for Outlook, including:

Download messages to Outlook from the Lockbin server
Request a file from any email user, with no password entry required by sender
When sending from Outlook to another user who has enabled Public Key Encryption, the add-in will not prompt for password entry.
Lockbin add-in is now ready for Outlook 2013

For more information about Lockbin’s secure messaging service or to download the free Lockbin add-in for Outlook, visit https://lockbin.com

Sneak peak at Lockbin 2.0 add-in for Outlook

Wed, 24 Oct 2012 19:59:34 -0500

We’ve been hard at work at Lockbin 2.0, now in beta testing. The improved add-in is now tightly integrated with Outlook. In addition to letting you send messages through Lockbin from Outlook (which it can already do), you will soon be able to also receive messages into your Outlook “Lockbin Inbox.”

Our implementation of Public Key Encryption into Lockbin will be complete with this release, which means that anyone sending a message to a Premium user need not invent a password to protect the message. This works well with the new “Request” feature. The Request feature lets you use Lockbin to securely request a file or response to from anyone.

“Request” also works from the Lockbin.com web application.

We are excited with this release, and we look forward to getting into your hands in the near future!

Comments about today's service outage

Wed, 17 Oct 2012 17:43:22 -0500

Lockbin experienced an outage today for nearly four hours. We’re sorry for the problems that you may have experienced today, and we want you to know that we care very much. I won’t bore you with the details, but I would like to describe what we’re going to do to fix it.

We are accelerating by about six months our plan to migrate Lockbin from hot, dusty, physical servers that can break down and fail over time, to distributed cloud servers that we can scale with demand, with the ability to spin up additional instances during times of peak usage or failure. This change, hopefully, will be complete within 30 days and help us overcome some of the limitations that we have experienced recently as Lockbin has continued to grow.

Despite the growing load, we are committed to maintaining the free services that Lockbin offers. Free use has grown tremendously. For each paid user we have more than one hundred free users on the system. Part of the value of the free users acrues to the paid users; paid users have the additional privilege of being able to send and receive messages from free users using public key encryption. In other words, paid users can send and receive messages with free users without a password exchange required.

We’re also on the cusp of releasing an improved Outlook add-in that allows people to send and receive Lockbin secure messages with Microsoft Outlook. This is sure to grow Lockbin’s usage base even further.

100% availability of the Lockbin service and protecting your data is sole focus. Please be patient with us as we roll out these improvements. You will soon enjoying the benefit of these investments of our time and treasure.

New Lockbin Feature: Notification Status Messages

Thu, 27 Sep 2012 16:42:00 -0500

Premium users will notice a new feature in Lockbin that can alert them to any problems with delivery of the message notification to the recipient. If Lockbin receives a bounced message notification, it will pass that information back to the sender. You’ll find this information under Message Status.

”Notification Error” is displayed in the status column.

Click on the message to see additional detail about the message.

Possible messages are:

Notification error — Lockbin encountered a problem while delivering the message notification to the recipient.

Not Read — The message has not be read yet, but there were no known problems delivering the notification message

Read by all recipients — the message has been successfully retrieved by all recipients.

The vast majority of delivery notification errors that Lockbin receives from email servers are due to mistyped email addresses. This information will help you correct or understand reasons why Lockbin was unable to deliver the notification message to the recipient. Sharing this information with the recipient may help to resolve the problem.

This feature is available now in your Lockbin Premium account.

Lockbin is a free online #email #encryption service at...

Sun, 23 Sep 2012 10:10:46 -0500

Lockbin is a free online #email #encryption service at https://lockbin.com.

Now there is a Lockbin add-in for Microsoft Outlook. It connects Outlook to your Free or Premium account on Lockbin.com so that you can send secure email messages. This video shows how to download, install, and use the Lockbin add-in.

Lockbin is introducing a new Inbox feature for Premium...

Wed, 05 Sep 2012 14:06:00 -0500

Lockbin is introducing a new Inbox feature for Premium users.

Collect all of your inbound Lockbin email messages in your Inbox.

The inbox implements Public Key Encryption so that recipients can reply to you without the need to create a password. You can send messages directly between other Lockbin users without the need to enter a password.

To activate the Lockbin Inbox in less than a minte, just log into your Premium account and click on “Inbox” from the main toolbar, and follow the prompt.

We are looking forward to your feedback!

Lockbin Email Encryption Service comes to Microsoft Outlook

Tue, 03 Jul 2012 15:21:07 -0500

Team Lockbin is happy to release it’s new email encryption add-in for Microsoft Outlook. Lockbin add-in links your Microsoft Outlook email client directly to your account on Lockbin.com.

You can download the Lockbin email encryption add-in immediately from our Facebook page, http://www.facebook.com/lockbincom

We hope the Lockbin add-in for Outlook will make your experience with Lockbin even more useful.

Installing the Lockbin add-in:

The Lockbin add-in requires Microsoft Outlook 2010/2007/2003/XP, and a Windows operating system.

Prior to installation, please close Microsoft Outlook.

Start the installer, and follow the prompts.

You’ll need to enter credentials for either a free or Premium Lockbin account. If you don’t have one, get one at https://lockbin.com

When the installer completes, restart Outlook.

Open a new email message and you’ll see the Lockbin toolbar.

To use Lockbin, just click the Lockbin button in a new email window, and then send your message.

We look forward to receiving your ideas and comments. If you have any difficulty, email us at info at lockbin dot com.

Preview of the Lockbin Add-in for Outlook

Fri, 15 Jun 2012 19:55:00 -0500

We’re excited to be reaching the conclusion of our Outlook add-in project. It’s working great in our testing, and we can’t wait to get it into your hands.

If you want to be the first to know when the Lockbin add-in is ready for download, go to our Facebook page and like us! We will announce it there first!

http://www.facebook.com/lockbincom

You will be able to link the Lockbin add-in directly to your Free or Premium Lockbin account. For Premium users, the emails that you send through the add-in will show in your list, so you can track when emails are retrieved, capture receipt information, and delete it at any time.

The add-in will allow you to store and manage passwords locally on your computer, if you want it to. Passwords can be deleted or changed at will. Just click on the field you want to change and type.

You have show the Lockbin settings on your main toolbar, or not. You decide. The default is “on” so that when you start Outlook, you’ll be reassured that it installed correctly.

Below is the setup screen that appears after the add-in is installed and the first time that Outlook runs. If you have your password and log-in, enter it now. Otherwise, come back later and set it up.

We hope this add-in will improve your Lockbin experience.

Don’t forgot to “Like Us!” at http://www.facebook.com/lockbincom

Download the new Lockbin Uploader

Tue, 22 May 2012 20:25:37 -0500

Version 1.4 of the java Lockbin Uploader is now available. With Lockbin Uploader, you can emails right from your laptop or desktop computer. Requires the free Java runtime environment.

This version will now connect with Premium accounts, allowing you to login to Lockbin.com and view information about the emails you have sent, including receipt information, sent time and date, etc.

Go to Lockbin.com and click on “Download Lockbin Desktop App”

Join Team Lockbin in supporting the Electronic Frontier Foundation (EFF) and their good work in fighting for the online privacy rights of us all.

https://supporters.eff.org/civicrm/pcp/info?reset=1&id=43