Unlike a typical cloud service, MF327 only transfers data between you and your PC.
Nothing is ever stored on any computer or device other than your own.
No third-party servers, no monitoring, no selling, sharing, or using your personal data
for any reason.
MF327 uses End-to-End encryption between your device and your PC.
Web sessions are protected using industry-standard Transport Layer Security (TLS),
versions 1.2 and 1.3. The use of ECDHE cipher-suites provides Perfect Forward Secrecy.
This means that even if someone managed to gain access to your private key, they would
not be able to use it to decrypt past or future communications.
Your passwords are encrypted using industry-standard strong encryption, AES-256 with an
authentication tag to detect tampering. Your master password is never stored to disk,
even on your own PC.
One great feature MF327 provides, that even your online banking cannot, is the
ability to personally verify and prove your connection is secure and private. This
ability comes from the fact that you are in control of the server and can validate the
certificate and keys used for encryption. Visit mf327.com/help/verify-certificate
to see how it works.
In additions to encryption, authentication, and data integrity, IP addresses are also
monitored for number of failed logins and unauthorized or malformed HTTP requests. If
too many are detected, the offending IP is blocked for a duration of time. This helps
prevent denial-of-service (DOS) and brute-force attacks.
Built-in user-isolation ensures that any additional user accounts you create can only access
the files and resources you allow. By default, each new user is restricted to a single folder.
Remote access can easily be disabled using an ON/OFF button in the Settings, or
remotely via command (WEB OFF, EMAIL OFF). Email commands are disabled by default and
can be required to contain a secret passphrase or come from a white-list of cellphones
and email addresses.
MF327 also guards against physical access to your PC using Webcam Motion Security.
Arm the software when you leave and be notified (with pictures or video) if any motion
is detected on your PC webcam or other network IP cameras. Detect motion on your mouse
and remotely lock your PC.
We digitally sign all of our software and updates and serve them over a secure connection
so you can be sure they came from us and were not modified by anyone else.