Mega pledges to offer more password options

Kim Dotcom's new Mega file sharing website has been up and running for a few days now. Dotcom said the service had 1 million registered users in its first day but he has since stayed silent on how many more people have signed up for Mega.

Now the site has been taken to task by some websites for what they call poor password security measures. A new entry on the Mega blog tries to answer those critics, while also promising to add more features sometime in the future.

Mega's security resides on the servers of the service itself; the user has a password but that password is not stored on their client PC. However, Ars Technica pointed out that there is currently no way to change a person's password, which in theory means that hackers could guess what a particular password is and therefore have unlimited access to a Mega user account.

Mega points out that common sense would seem to suggest people should use very unique passwords when establishing a Mega account. However, the blog added it plans to offer some kind of password recovery and change feature in the future. It has also said it plans to allow users to add as much entropy manually as they want before generating a key.

So, if you are still on the fence in terms of wanting to use Mega, even with its free 50 GB of space, you might want to wait until the password recovery features are added.

Source: Mega | Image via Mega

Report a problem with article
Previous Story

Microsoft officially launches Windows Azure Media Services

Next Story

Intel to shut down production of desktop PC motherboards

18 Comments

Commenting is disabled on this article.

I have registered 4 accounts with 4 separate email addresses, I am able to log into 2 of them and I'm not able to upload anything to them. I give up! They just sit there with Transfer Pending.

I have successfully uploaded with Firefox 19. And downloaded with Chrome 24 and Internet Explorer 10. Downloading from the service with Firefox 19 doesn't work, it doesn't pop up a download box after the transfer is done.

If you read their blog they state... : Mozilla Firefox 18: Carefully avoids providing any API that would allow writing files from JavaScript.

So that might be the reason.
My everyday browser is FF18, but I'm currently using chrome for Mega and online banking and nothing else.

Yeh I've forgotten my password (used lastpass to generate one but it did't seem to save it in my vault) and I was surprised there was no forgotten password link. It also seems you can try as many times as you like to get into your account..

All the data is encrypted. If you lose your pass the data is gone forever. If you could recover your password/data then dotcom would not be holding up his end because that would mean that he had access to your data/master key.

Don't blame anyone if you can't remember your own password. You want security? Remember the damn password. You want to "recover" a password by entering some dumbass answer to a dumbass question? If anyone doesn't realize this goes completely against the idea of using a proper password and having proper security, well, what can I say?

It's so slow at the moment as to be unusuable.

Dotcom said at a press conference here in nz that the site was designed by people with a background in security. Clearly they need to brush up on their supposed field of expertise.

Walrush said,
It's so slow at the moment as to be unusuable.

Dotcom said at a press conference here in nz that the site was designed by people with a background in security. Clearly they need to brush up on their supposed field of expertise.

Security and speed are very different things, at the moment their servers are running at full capacity which is rightfully so! Its a new service and they obviously couldn't afford an amount of servers that are on par with Microsoft or Google! Things will start to even out over the next couple of weeks.

ingramator said,

Security and speed are very different things, at the moment their servers are running at full capacity which is rightfully so! Its a new service and they obviously couldn't afford an amount of servers that are on par with Microsoft or Google! Things will start to even out over the next couple of weeks.

He was commenting on the news story about passwords.

I registered after the site went live and I haven't received the confirmation email. I tried to register with the same info two or three more times and I succeeded but the email is still missing.

I had the same problem, but then I tried to register with my gmail instead of hotmail, which made it work. I have no idea why.

same, used my outlook.com address and nothing so used my company domain email and got it right away. Either Mega is just not sending to outlook.com servers or those servers are blocking everything from mega.

duddit2 said,
same, used my outlook.com address and nothing so used my company domain email and got it right away. Either Mega is just not sending to outlook.com servers or those servers are blocking everything from mega.

I signed up the first day with an AOL email (don't judge, its my spam email). After about 2 hours I tried again with the same email. It took over 24 hours for the email to get to my inbox, but when it did I got 2 emails.