How secure is the iForm app?

iFormBuilder Common Questions

How secure is the iForm app?
What is iForm ES?
What happens if I forget my old password?
What are the key features of iForm ES?

The iFormBuilder Mobile Platform is committed to keeping your data safe and secure from the point of data entry on the device until it is safely behind your firewall.

What is iForm ES?

iForm ES adds a higher level of security to the standard iForm application. Going beyond standard Apple security protocol, iForm ES is engineered with a secure workflow in mind.

PLEASE NOTE: 10 consecutive failed login attempts will destroy the local database on the device. Once the database is destroyed, the data CANNOT be recovered.

What happens if I forget my old password?

Unfortunately, if you forget your old password, there is no way we can recover it. It is an aspect of the iForm ES app. If you have 10 consecutive failed login attempts, the local database will be deleted and all the saved data will be permanently gone (as stated above). This is similar to Apple’s secure setting (Erase iPhone if using the wrong passcode too many times).

To get back into the app (without any saved data), you will need to select "Clean Local Database" as an option in the challenge screen or delete the app and re-install.

What are the key features of iForm ES?

KEYSTROKES: Built into iOS is a keystroke logging mechanism that assists with predictive text. To maintain a high level of security with iForm ES, it was imperative to disable this logging mechanism.
CHALLENGE PASSWORD: iFormES asks the user to enter a challenge password every time the application is opened. This password is required to enter the application.

PLEASE NOTE: If a user has changed his or her iForm password, they must enter the old password on the challenge screen the first time after making the change. Once inside the iForm app, the user can type in his or her new password and sync. Following this initial sync, the user can now use the new password on the challenge screen.

SECURITY TIMEOUT: You can set this parameter to lock the user's device after a specified idle time. If no interaction takes place within this time limit, the challenge password will be presented to the user for verification.
ENCRYPTED LOCAL DATABASE: The local client database is encrypted, so even if the device is lost or stolen, your data is safe from extraction via jailbreak.
ELEMENT LEVEL ENCRYPTION: Use this feature with your public and private key pair to specify certain fields to be stored encrypted in the database. When a field is marked for encryption the only way to decrypt the data is using your private RSA key.

Articles in this section