|
PASSPACK - FULL REVIEW
The latest online storage features
let web-based password manager services such as Passpack
tackle what has long been a security no-no: storing all
your user names and passwords online.
In addition to a site log-in,
Passpack employs a "Packing Key" passphrase to encrypt
your stored cache of account data.
Once downloaded and decrypted, that
cache stays only on the computer you're using until you
save it, at which point it's encrypted again and re-sent
to Passpack for storage.
Passpack doesn't ever have access
to the packing key, and you can't decrypt your passwords
without it - so be careful not to lose the key.
You can use Passpack to log you in
automatically to sites, although you might need to train
it on a specific site. Once you give PassPack the
password data to your frequented web sites, you can turn
on its coolest feature, which is an auto-login
bookmarklet for all the sites you've entered into
PassPack. The first obvious concern that comes to mind
with a service like PassPack is security, and they've
gone to lengths to address that issue. Essentially,
PassPack encrypts your data before it's even sent to
their servers, so not even the PassPack staff will ever
read your passwords
The chances of any problems are pretty remote but I
think the difficulty is in the perception and the idea
of having vital information stored on the Internet. This
is likely to put many people off storing information
like Bank and Credit Card details on the system. This is
the reason the program is scored down on Security rather
than any known issues.
Although you can store details such as address and
credit Card there is no Fill Forms feature such as in
Roboform or Handy Password so you cannot fill in long
web forms with one click but have to copy and paste.
The free Passpack service allows
you to store only up to 100 log-ins, but the company is
bringing in a pro package for over 100 saved logins
which will be about $13 pa
To open
an Account with Passpack click
HERE
FULL DETAILS FROM PASSPACK
Find Stuff Fast
You can page through your Alphabetical Order List using
the next and back buttons, or you can jump straight to
the entry by doing a Quick Search.
Passpack doesn't use predefined categories, but rather
let's you Tag your entries with labels you find
useful. Add as many as you'd like, there's no limit.
Click on a tag either in your list or in the tag cloud,
and Passpack will show you all the related entries.
No phishing, No Spying Eyes
Use the Anti-Phishing Welcome Message to help you
protect yourself against phishing.
The Auto-lock option will lock up your pack, even when
you forget it and leave it unattended. Also, the
Scrambled Password Field lets you copy the password,
without exposing it to spying eyes.
Secure Traveling
Passpack let's you set up Disposable Logins for use when
travelling. These One Time Password/Packing Key
combinations should be used when accessing your account
on public computers.
Encryption and Evolution
Passpack uses US Government approved AES encryption over
a secure HTTPS connection. The same architecture which
enables Double Access Data Retrieval also allows for
Automatic Updates which are quick and
Easy Entries
The entry window is built for simplicity, and
flexibility. You can type in a title, user, password,
links and notes for each item - or leave some of those
fields blank, only fill in what you need.
You can also use the Password Generator to quickly make,
and fill, in the password.
The Go Button makes clicking through to the
website faster, and lets you take advantage of the
auto-login.

It's YOUR Data
Import and Export to easily move between password
managers - no vendor lock-in.
Backup and Restore lets you make and restore encrypted
copies of your Passpack entries. You can even choose a
different Packing Key for your backup for a little extra
umpf.
Strong, Non-Permanent Login
If you can type it, you can use it in your Pass,
Packing Key or User ID (and change it
anytime you want). The built-in password quality tester
will let you know how strong it really is.
Data Packing
Your data is encrypted on-the-fly
before leaving your browser - that's the process we call
Data Packing.
We use the AES algorithm, US
government approved for classified information, to make
sure that only you with your
secret Packing Key can decrypt it.
Your Packing Key never gets
sent or saved to the server, so not even Passpack staff
knows it. As far as the world outside your browser is
concerned, your Packing Key is a complete
mystery. Without it, your data can't be read.
Disposable Logins (OTP)
A Disposable Login is a one
time Pass and Packing Key combination: you
use it once, then it's thrown it away.
Disposable Logins come in
handy when travelling and you need to use a public
computer.
With Disposable Logins, you
can outsmart keyloggers. Even if your disposable Pass
and Packing Key were to get "captured", it
doesn't matter: they won't work again.
Backup & Offline Version
Passpack lets you save a personal,
encrypted backup of all your entries. Don't trust the
internet? Download the Offline Version to manage a local
copy of your data.
Power Outages & Monitoring
Passpack resides in a
disaster-proof data centre with an un-interruptible
power supply (in an extended power outage, if even
batteries fail, a natural gas generator will take over).
The data centre is monitored both on-site and off-site,
24 hours a day. Data is backed up daily
Anti-Phishing Welcome Message
A custom greeting, IP recognition
and hand-eye training combine in a new technique that
combats phishing.
Your custom welcome message is
shown to you after every log in, but before
inserting your Packing Key. So if you accidentally sign
into a fraudulent site, you'll immediately notice that
the welcome message is missing.
Thanks to the IP recognition, even
if the phisher then attempts to log in to the real
Passpack to glean your welcome message, he'll see
nothing. Read more here.
Strong Pass Phrases
Passpack not only lets you use
strong pass phrases, it measures your Pass and
Packing Key while you type.
You can measure ALL your
passwords this way - see which ones need changing!
Then use the built-in password
generator to quickly make unique passwords for all of
your logins. And why not? you don't have to
remember them, Passpack does.
HTTPS Secure Connection
Only packed data is ever sent over
the internet, and it is always sent over an SSL
Secure Connection. Always connect to https://www.passpack.com.
Non-permanent Account Info
Your Password, Packing
Key and even your User ID can all be updated
anytime you want, and as many times you want. In fact,
we urge you to do this from time to time. Just PLEASE
always remember to make note of the new account
information and store it in a safe place.
Summing it all up
With AES encryption (the same as
used by the US Government) and an SSL Secure Connection,
your data travels safely over the internet. But let's
suppose a hypothetical "bad-guy" gets into our servers,
all he'd find would be a bunch of illegible data (not
even Passpack can read your data). If he's determined to
crack this data, he'd have to crack the Packing Key
of every single User, one-by-one, in order to reverse
the packing process. To date, this type of brute force
attack on AES is considered impossible. That makes
Passpack an unattractive target.
To open an Account with Passpack
click
HERE
|