Whiskers v1.3

I fixed a few bugs and added a few new features thanks to one great user's suggestions and help.

Bug fixes:

• The first Other item you add to an account could not be deleted. This is fixed.
• When editing an account and adding either a URL or a Note, after you saved the changes and returned to the Details page of the account, the URL and Note text would be missing, although it was actually saved. This is fixed.
• Sorting on the All items list was not consistent. Items would be grouped alphabetically but within the group they would not be sorted alphabetically. This is fixed.

New Features

• URLs are now hyperlinks. If you tap on the URL it will attempt to open the link in your browser.
• Copy to Clipboard feature.
• On the Details page, tap on an item and it is copied to your clipboard. Copy your password to the clipboard by tapping on it, then tap on the URL to go to a site and then paste in your password from the clipboard.

Disclaimer on the Copy to Clipboard feature...

Whiskers does NOT clear the clipboard, so whatever data you copy to the clipboard, it remains there until you change it or clear it yourself.

Whiskers v1.2 Submitted to Store

I have submitted version 1.2 of Whiskers to the Windows Phone Store today. It contains the new features and changes I described in an earlier post.


Here's the list of changes:

• Camera capture support and ability to save the captured photo to an item in Whiskers
• Lockout timer
• Landscape orientation support
• Unlock PIN-pad now contains the period (.) character
• Updated splash screen
• Save, Delete, Cancel App Bar buttons re-ordered

new edit photo page

The camera capture support is the big one for this release. When you add or edit an item in Whiskers, you have the option to capture a photo using the camera on your phone and save it with the item.


For this feature I had to use the Camera APIs directly instead of the simple CameraCaptureTask. Thankfully, there's a great sample from MSDN that shows you how to easily use the Camera APIs and get a very functional UI.


The Camera APIs allow you to focus, adjust the flash, and set the resolution. Most phones have additional camera settings, such as Scene settings and special effects, neither of which is available to you when you use the Camera API for Windows Phone 7.x. With Windows Phone 8 you do have some advanced abilities through another API but that isn't an option for me right now since I have one application for both Windows 7 and 8 and I wanted to keep things simple.

image flipped on Nokia 920

I encountered one irksome issue when testing on my Nokia Lumia 920. Photos captured in Portrait orientation are flipped vertically...


Searching the forums, this appears to be a known issue, with a fix, but it may take a long time before this fix becomes public. So to correct this (because it needs some correction ;) was to provide a vertical flip App Bar button to flip the image if its not oriented properly. Thanks to Tim Heurer and his post on "Handling picture orientation in CameraCaptureTask in Windows Phone 7" for some help and some code.











Once you capture an image and save it to your item, a small thumbnail shows up on the item's detail page. Tap on the thumbnail and you will then see it full-screen. Double-tap and it will zoom in to 100% and you can pan left, right, up or down to view the image at 100%.

photo thumbnail

100% zoom

full-screen

lockout settings

The new lockout timer feature is an additional to make Whiskers more convenient to use when you are switching back and forth between Whiskers and another application, like your browser. Until now, each time you open or return to Whiskers (if it was in the background), you would need to enter your PIN to unlock Whiskers. With this new feature now you can control how long Whiskers may stay unlocked until it automatically locks again and requires you to enter your PIN when you open or return to Whiskers.


 There are several options for configuring the lockout time. You can keep it at Always, which is the default and how Whiskers has operated until now. With Always, Whiskers will always lock when you leave Whiskers and either open it again or return to it.

lockout options

The remaining options are 30 seconds, 1 minute, 3 minutes, 5 minutes, 15 minutes, and 30 minutes. Let's say you choose 30 seconds. Now, when you leave or close Whiskers, Whiskers will remain unlocked for another 30 seconds. If you open or return to Whiskers within that 30 seconds, Whisker will open without requiring you to enter your PIN to unlock it. Wait until after 30 seconds and Whiskers will lock and require you to enter your PIN when you open it again or return to it. It's that simple!


I didn't include a Never option with this feature because I felt it would make Whiskers far less secure and would essentially do away with the need for a PIN.




Hopefully this new version will go live within the next week or so, depending on the approval process.

Kaspersky's Best Windows Phone Security Apps

I came across this post today on the Kaspersky lab blog where Whiskers has been recognized as one of the best Windows Phone Security Apps. Hooray!


The post lists twenty different security apps and Whiskers made #18 on the list...

It was really kewl to come across this today. I don't have huge download numbers for this app but the feedback I get from people is always great.


When I created Whiskers, I figured it would probably not get very many hits because of the name. You see, the name doesn't have "password", or "locker", or "security", or "encryption" in the name and the Windows Phone Store search mechanism has always been less than desirable when it comes to finding apps using plain old search in the Store. Many people looking for a secure password locker for their WP usually don't come across Whiskers.


There is a reason for the odd name...if your phone is lost or stolen and someone gets access to it, my hope is that Whiskers is not the first app they open to see all of your secrets, passwords, etc. With a name that has "password" in it, I'm sure that acts like a big shiny red button for the curious and down-right evil. With name like "Whiskers", who's gonna look at that? :)

Whiskers Enhancement List

I wanted to jot down a few of the enhancements that I'll be working on in the near future for another minor update to Whiskers.

• Ability to capture an image using device camera and add it as another entry property.
• Fix bug on PIN unlock screen which does not allow period (.) character, which is allowed on the PIN create screen.
• Lock timer option. Controls when the unlock screen shows. always, 30 sec., 1 min, 3 min, 5 min, 15 min, 30 min, and never options. Default is 1 min.
• Support for Landscape orientation.

Not a huge list of items but a few enhancements I will put in to improve Whiskers just a little more.

Whiskers v1.1

I've updated Whiskers for Windows Phone 7.5 to version 1.1 and have submitted this to the Store. Pending certification, it should be available within five days from now.

 

I've added a few new features and changes with this release. The first being the ability to backup and restore your data so if you upgrade or switch to a new phone, you can transfer your data. I've also added more new icons, so we have about double the amount now. Lastly, just a small tweak with the all items list in the main panorama view. If you have less than ten items, its just a flat list without the groupings. Once you go over ten items in your list, it switches to a grouped items list for quicker access to your items.

 

 

For the backup and restore feature, I did not add the ability to connect to the Cloud or SkyDrive, etc. I wanted to keep Whiskers "safe" and not require access to the Internet. So, in order to accomplish the recovery feature, you simply email, to yourself, an unencrypted but encoded block of text data, that you copy & paste back into the app where you want to restore your data. While doing things this way is fairly simple and albeit rudimentary in some ways, it does have a couple of important limitations.

 

The first limitation is the approximate 16kb message body limit for email messages in Windows Phone 7.x. If the data block you email yourself exceeds this built-in limitation, you can't backup and restore your data. The data block is unencrypted but has been compressed and base64-encoded so it can reside as plain-text in an email message body. If you have 50 or more entries in Whiskers, you may start to hit the upper limit of 16k characters, which is the limit of an email message body in Windows Phone. How can you tell if you've hit this limit is to check if your email contains both tags that delimit the encoded data block.

 

 

In this example, you can see both the ---BEGIN DATA BLOCK--- and --END DATA BLOCK--- tags. This is safe to email to yourself. Then on your new phone or phone you want to restore this data to install Whiskers, then go to the email you sent yourself and copy and paste everything in between the two tags. Don't include the tags! Next, open up Whiskers, go to the Recovery page, then paste in the data block you copied and tap Restore. You should see a message stating your data was restored.

 

 

What's nice about this method of backup and restore is that Whiskers does not need access to the Internet, so your data is safe and secure and leaves you completely in control of it. For Windows 8 and Windows Phone 8 users, I will be creating a new version of Whiskers for those platforms exclusively that will safely store your data in the Cloud using Windows Azure Mobile Services. Since Windows 8 revolves around the usage of Live ID, Whiskers for Windows 8 and Phone 8 will take advantage of this so you don't have to provide extra credentials to Whiskers and you will be able to authorize Whiskers at any time through your Live ID account settings. More on that later in another post...

 

 

Here's a sample of some of the new icons:

 

 

I'm pretty excited to provide this update. I know some users have been asking for it so I know the need is there. In fact, I recently upgraded to Windows Phone 8 so I needed a way to transfer my data.

Whiskers

I've submitted Whiskers the password keeper to the WP7 Marketplace. I think I began working on this last month sometime, after I finished up TeaMate. This app was far more involved than the previous two. There are a total of 17 pages (views) and close to 2,000 lines of code. The .xap may come in at a scant 351 KB but there are countless hours spent putting this application together.

At first I was going to call this PassMate but coming up with a logo/icon around this proved to be too difficult. Instead, I decided to place shield for an eye-patch on a cat and call it Whiskers instead. Yea, Whiskers may not have anything to do with security and the cat may be mistaken for a pirate-cat, but Whiskers seemed like a good name. The idea for the patch came from our cat, Toby-kat, who has sort of a bum eye. Toby-kat doesn't really have a patch but since he doesn't see too well out of one eye, we seem to think he does.

Whiskers is a pretty straightforward password locker. You create an account, give it some details, and its safely stored until you need it. Accessing your information is pretty fast and easy with all the details available just about in one screen. There's even a recent page which keeps track of what you've been accessing lately and displays those first.



So that's a total of three apps so far. I have many more ideas and some enhancements in mind for the existing apps. I don't have anything planned yet but I think I may take a short break from app-making and get back to some photography.

Hard at Work

I've been hard to work for the past month on my next WP7 app. It's called Whiskers and its a password keeper. I wanted to develop a password keeper that accomplished the following few goals:

1. Is Simple
2. Is Secure

The simple part is, well, simple. Metro UI, clean, appropriate iconography, and features that simply "get to the facts, ma'am". What Whiskers does best right now is store your passwords and other important data easily. What is missing are features such as backup, import, export, etc.

The secure part has been a wrestling match. First, I wanted the data to be encrypted securely. I went through several options and iterations of implementations and finally settled on the built-in Data Protection API (DPAPI) in Windows Phone 7. The API safely and securely encrypts any type of data and does so in a way that the data may only be decrypted on the very same device. By using the DPAPI, I don't have to store any key data, salt values, or other private encryption bits that could be sniffed out of my .xap or from Isolated Storage data.

The second part of security is leaving out the need for application permissions such as Data Services. For me, any application, especially one the stores my private data, should have very good reasons for the need to access the Internet. Whiskers does not and this should give anyone confidence that their data isn't being sent and stored someplace out in the ether. Accomplishing this was full of compromises.

The first compromise was leaving out a Mango feature that I thought would be useful and that is pinning a tile to the Start screen. I implemented the ability to pin any one of your secrets to the Start screen. I later pulled this feature because usage of the ShellTile namespace requires the application to have the Data Services permission. Why? Because a ShellTile has a Uri property which means the tile could redirect to a URL somewhere out in the ether. 

Other compromises deal with the whole, import, export, backup and save to the Cloud features that many people ask for. Again, in order to feel that this app is secure and isn't sending your private data somewhere out into the ether, I decided to leave these features out that way I can leave the need to add the Data Services permission to the app. 

In the future, I'm considering a pro or plus version of the app that would enable Data Services and allow you to use the Cloud. This would go against my two primary goals for Whiskers but then again, this would be a different version of the app altogether so I guess that is ok.

I hope to wrap up this first version of Whiskers soon and submit it to the Marketplace. Like my previous apps, I'm going to make this free and free from Ads.