[Hardhead]

I just installed IDVault with Smart Card Technology this evening and thought I would share my experience with what I have.

First of all IDVault uses Smart Card Technology and protects your on-line Identity and passwords.

Its basically a hardware security for your on-line transactions.

Let me also add that this only works on Internet Explorer only. Yes, IE 7.0 is supported and I asked support in a email if they would support Vista and they told me that there engineers were already using ID Vault and hadn't had any problems yet.

Quote

Hello,
Yes, the ID Vault will support Vista when it is released in January. In fact, one of our engineers has been running the ID Vault on Vista for the last couple of weeks without any problem, but we will be doing more testing up until the Vista release.

Thank you,
ID Vault Support

Sorry I didn't create the screen shots when I installed the product, but it was pretty straight forward.

When setting up ID Vault, I was asked to create a Pin Number from 4 to 8 numeric digits.

Then the program created a Serial number for me if I wanted to change the Pin number later.

I did create screen shots of the program itself.

Install the software first then reboot if needed and insert ID Vault.

Heres a shot of the program after it is loaded in the system try.





Note how in the next shot that there is a data list of Banks, Credit Unions, and Brokerages that are already listed for you A thur Z when you select Create Financial Secure Favorite. There are thousands listed. So if yours is not there then you can create it yourself.





Listed below is the one that I created so you get an idea about how to do it. First, I went to login at CoU with user name and password. I then got the prompt below. I selected Yes.





I selected yes again below. You do have the option to do what you want.





It remembers your name and site for you. Listed below:





Now I'm not sure but I do beleive that everything goes into a virtual keyboard below and you enter your password. This keep hackers from getting your password.





My password is entered below.





Click next.





Now I have to enter my Pin number that I choose when I installed ID Vault. I was asked to create a Pin Number from 4 to 8 numeric digits. I choose 8 digits.








Then it adds the site plus a folder to my favorites below for me.





Then I click next to connect to the site.





Then above the system tray I got the message that I'm connecting.





Listed below are other options that I can do with ID Vault by left clicking on the icon in the taskbar.
Note I didn't list them all.














All in all I really like the program. There is I believe a 19.95 dollar subscription fee per year to keep updated which I think is well worth the money.

One thing that I haven't tried yet is to see if I can run it on another system without the software.

LOL, I just found that you can run ID Vault on any system as long as you download the software from here.

Now don't get me wrong as I'm not trying to promote this product in any shape or form but I'm here to show you the details that I found when using ID Vault.

This was a Christmas present that I received from Santa.

More information about ID Vault can be read at there website here.

[Donna]

Wow! That security gadget is cool and has nicer feature than Microsoft Fingerprint Reader that remembers password and better than Norton Privacy Control that protects personal informations (e.g. credit card, email address, bank acct, login info). OK, both are different but one thing nice with your IDVault is you can use it anywhere.. is it?
If so, I want one and I hope to see that here in Asia!

BTW, your Santa is sweet, smart and cool.

[RubbeR DuckY]

Wow, that thing is complicated =P, I lost you... IN THE TUTORIAL. Nice present though.. Wish Santa would bring me software, instead, he makes me create it.

Edit: The formatting on the main page is a bit off.. the pictures are all stacked together.

This post has been edited by RubbeR DuckY: 28 December 2006 - 05:34 AM

[Hardhead]

Mom was good to me.

She got one and I installed hers first. I just got mine today. I went to her house to install the 200 gig hard drive I got her and picked up ID Vault.

You can use it anywhere Donna. Here's the download. http://guardidsystem...main/page/1013/

BTW, the data base just updated for the program.

[caughtintheact]

I don't know much about keyloggers, but I have read that some of them can take screenshots and that on-screen keyboards are also vulnerable. See http://en.wikipedia.org/wiki/Keystroke_log...creen_keyboards and http://www.answers.com/topic/keylogger. So IDVault claims may not be correct.

[Hardhead]

caughtintheact, on Dec 28 2006, 12:56 AM, said:

I don't know much about keyloggers, but I have read that some of them can take screenshots and that on-screen keyboards are also vulnerable. See http://en.wikipedia.org/wiki/Keystroke_log...creen_keyboards and http://www.answers.com/topic/keylogger. So IDVault claims may not be correct.

I may stand to be corrected but I believe that ID Vault runs a virtual keyboard and the only thing that would be captured is the dots. Also you only get 3 trys to get the pin number since it uses smart card. After that you get nothing.

[Mainer]

Preventing keystroke capture
Since this article has looked at keyloggers, it was found worthwhile to include a section on how to avoid keystroke capture. Keyloggers, both hardware and software, are basically designed to capture what a user types on the keyboard. On the web application side, one method to avoid keystroke capture is to use a virtual keyboard for entering the username and password. A virtual keyboard is analogous to a graphical keypad where a user clicks on the characters rather than types them on the keyboard. This approach may not be practical for every user, for obvious reasons. However, it can be still be useful for very sensitive applications. Note however that even this approach is not completely secure, as some keyloggers are designed to capture screenshots on every mouse-click. Thus, the password of the user can still be found out when a virtual keyboard is used by looking at the screenshots and getting all the characters clicked corresponding to the mouse click. To avoid this, some virtual keyboards also have a feature that allows a user to enter a character by hovering the mouse cursor over a letter for a few seconds. Thus the user can enter the password without even clicking the mouse button. An example of a virtual keyboard is shown below in Figure 6.

http://www.securityf...om/infocus/1829

[johngalt]

I use a free password manager called KeePass - I used to use Password Agent and still do on my parents' computer so they can securely access their sites.

The benefit of KeePass is that it too has a virtual KB that you can use, and rather than creating items in favorites, it stores the like in its own AES encrypted database.

The Virtual KB allows for bypassing keyloggers and any software that is going to be taking screen shots will be eating some serious resources (for it would have to take one every time you pressed a key on the virtual KB) so I feel relatively complacent in using the program.

Also, I have it installed to my USB Key drive, and it goes with me wherever - no need to install anything.

Congrats on the new IDVault, and I will probably be adding this asa resource on the new computer I build, if I decide that KeePass is outdated.