Indeed, someone having taken a full (or even just minimal, no need to escalate privileges) access to your system will see you use this file and will also be able to capture your keystrokes while you type your password. However, such utility are not designed to protect you against your first mentioned case (someone getting access to your account data on your machine and/or you accessing the file content regularly).

So, as long as the tool designers did their job well, you are safe for the second case (somebody getting his hand on the encrypted file and trying to crack it).

The attacker is in possession of the file, and is actively trying to decrypt it, knowing that it has the bank details.ħ-zip (or any other similar utilities) encryption is designed to protect archived files.

The attacker takes full control of the system, but does not know that this particular file is of any importance to him.

Is this secure enough, under the following scenarios? I do not store this password anywhere.Īlso, the filename of the text file is kept such that no one will be able to tell that the file is related to bank details at all. The password for the encryption is chosen such that it won't be found in any dictionary and is rather an almost random string (composed of 15-20 upper and lower case letters, numbers, and symbols).

I compress and encrypt it with 7-Zip using the following parameters: I have a text file in which I store all my bank details.

Password 7zip