Security

State-of-the-Art Crypto

iTwin uses industry best practices and thoroughly analyzed crypto protocols and algorithms.

• Advanced Encryption Standard (AES) 256 bit encryption is used to protect all data communication.
• AES encryption standard has not been broken so far and many consider AES to be military grade.
• All data amenable to compression is first compressed before encryption.

Remote Disable

• When two halves of iTwin are paired, the owner is sent an Remote Disable Code (through email) which can be used to break the connection between the two iTwins.
• Using this disable code, if an iTwin is missing, it can be disabled remotely.

Smart Key Generation

• Two iTwins together generate a random 256-bit AES key, everytime they are physically paired and plugged into a computer.
• Smart Key generation is assisted by the computer to add randomness.
• Smart crypto key resides only on the two halves of the paired iTwin.
• Smart Crypto key is used for encrypting all data traffic between two iTwins.
• Patent-pending technology.

Password Support

• Passwords of any length can be set.
• Unlike other web services, iTwin's password is stored on itself, not on any server.
• If you forget your password, simply pair both halves of your iTwin, plug them into a computer and set a new password. No need for tech support!

TwinTrust Authentication

• Before allowing any data transfer, every iTwin is authenticated by iTwin's TwinTrust servers.
• All communication between iTwin and TwinTrust is secured using industry strength HTTPS (RSA 1024 bit, 128 bit RC4) protocol.
• After successful authentication by TwinTrust, TwinTrust assist iTwin to discover its other half.

Two-Factor Authentication

• After authenticating with TwinTrust, two halves of iTwin mutually authenticate each other using their pre-shared AES 256 bit crypto key.
• If password is set, then password verification is performed on both iTwins before data transfer is initiated between two iTwins.