Mitro

{{Infobox software

| name = Mitro

| logo = Mitro Company Logo.png

| license = 2014: GPL-3.0-only{{efn|GPL-3.0-only since 2014-07-31.}}
2012: Proprietary

| website = {{URL|mitro.co}}

}}

Mitro was a password manager for individuals and teams that securely saved users' logins, and allowed users to log in and share access.

On October 6, 2015, the Mitro service shut down.{{cite web|title=Mitro is Shutting Down October 6th, 2015|url=https://www.mitro.co/shutdown.html|publisher= Mitro Labs|date=November 3, 2015}}

The successor to Mitro is named Passopolis; this is a password manager built upon the Mitro source code.

History

Mitro was founded in 2012 by Vijay Pandurangan, Evan Jones, and Adam Hilss. Mitro was backed by $1.2 million in seed funding from Google Ventures and Matrix Partners.{{cite web|last=Cutler|first=Kim-Mai|title=Get Your Friends, Co-Workers Out Of "Password Remembering Hell" With Matrix-Backed Mitro|url=https://techcrunch.com/2013/09/05/mitro-passwords/|publisher=TechCrunch|date=Sep 5, 2013}}

On July 31, 2014, the Mitro team announced that they would join Twitter, and at the same time, they released the source code for Mitro on GitHub as free software under GPL.{{cite web|title=Mitro is joining Twitter and is now open source|url=http://labs.mitro.co/2014/07/31/mitro-is-joining-twitter/|publisher=Mitro Labs|date=Jul 31, 2014|url-status=dead|archiveurl=https://web.archive.org/web/20140804180412/http://labs.mitro.co/2014/07/31/mitro-is-joining-twitter/|archivedate=2014-08-04}}{{cite web|last=Eckersley|first=Peter|title=Mitro Releases a New Free & Open Source Password Manager

|url=https://www.eff.org/deeplinks/2014/07/mitro-a-new-free-password-manager|publisher=Electronic Frontier Foundation|date=Jul 31, 2014}}

The Mitro team announced the shuttering of the Mitro service with the following timeline:

July 11, 2015: Initial announcement that Mitro would be shut down
July 18, 2015: Creating new accounts was disabled
August 4, 2015: Final email warning about imminent shutdown was sent
September 24, 2015: Mitro become read-only
October 6, 2015: Mitro service was turned off
October 31, 2015: All Mitro user data permanently destroyed

The Mitro team explained the reason for shutting down the service was that the cost and administrative burden to maintain the service in their spare time with their own money had become too much. Given that they could not properly manage a service that people rely on for their security, they needed to stop running it.

Former customers were encouraged to move to Passopolis, and independent project that uses the open source Mitro code, or use alternatives such as 1Password, Dashlane, or LastPass.

On October 5, 2015, Mitro was officially terminated by Twitter.{{cite web|last1=Novet|first1=Jordan|title=Twitter will shut down password manager Mitro on Aug. 31 after buying it last year|url=https://venturebeat.com/2015/07/11/twitter-will-shut-down-password-manager-mitro-on-aug-31-after-buying-it-last-year/|website=Venture Beat|date=11 July 2015 }}{{cite web|title=FAQ|url=https://passopolis.com/faq.html|website=Passopolis}}{{cite web|title=Mitro is shutting down October 6, 2015|url=http://www.mitro.co/shutdown.html|website=Mitro}}

Security

Mitro uses Google's Keyczar on the server and Keyczar JS implementation on the browser.{{cite web|title=Why Mitro Is Secure: Security FAQs for Experts|url=https://www.mitro.co/security-faq.html}}

Master key is a 128-bit AES key derived using PBKDF2 (SHA-1; 50000 iterations; 16 salt bytes)
RSA with 2048-bit keys using OAEP-SHA1 (separate signing and encryption keys)
AES with 128-bit keys in CBC mode with PKCS5 padding
All encrypted data includes a MAC (HMAC-SHA1)