Infinity PasswordSafe v1.21
Since the release of the first Infinity USB, it has been possible to store and manage passwords on a smartcard, using the appropriate 3rd party software.
WB Electronics has now made it much easier with Infinity PasswordSafe, a free utility for use with Infinity USB Unlimited, for secure password storage and distribution.
Infinity PasswordSafe currently works with all Atmel AT90S8515 based cards (Funcard1-Funcard7 / PrussianCard1-PrussianCard5 and DragonLoaderCard (AVR)).
Support for all popular PIC-based cards (Goldcard, Silvercard, GreenCard1+2) will be added in the near future.
Up to more than 1000 passwords can be stored on a single smartcard, and passwords are easily accessed with a custom shortcut key.
When a stored password is needed, simply place the cursor in the password (or username) field in the current running application, and press the shortcut key. A list of all passwords will appear, and clicking the needed password will paste it into the password field of the application.
Why is it a good idea to use Infinity PasswordSafe?
- All your passwords are easily accessible and secure at the same time.
- Not having to remember all your individual passwords makes it easier to use unique and strong passwords.
- Storing the passwords on a smartcard, makes it possible to take the passwords with you, for use on another PC.
- Separating the passwords from the PC by using a smartcard improves security.
- Different users on the same PC can each have their own PasswordSafe smartcard, with their own passwords.
- Distributing new passwords to clients or users is easy and secure.
Disclaimer: WB Electronics and FunFiles Satellite can not be held responsible for any loss of data that may occur using this product.
Download Infinity PasswordSafe and run the setupfile.
During installation you can choose to "Run Infinity PasswordSafe when Windows starts", which is recommended.
After the setup is done, open Infinity PasswordSafe.
(With no card inserted, the list of password will be empty).
Pressing the close button will minimize the window to the systray.
Doubleclicking the icon in the systray will open the mainwindow, while rightclicking will make it possible to go directly to the settings window.
The default shortcut key for the password-list popup is F11, but can be changed into any key not currently in use by the system. Simply place the cursor in the input-box, and press the key you wish to use.
"Minimize mainwindow to tray on startup" - The mainwindows will not show but the software will minimize directly to tray if this option is checked.
"Always paste passwords only" - When pressing the shortcut key, the list of passwords will show. When choosing a password on the list a small dialogue asking whether to paste "Password", "Username" or "Password + Username" will popup. If this option is checked, the password will be directly inserted.
"Show username and password in list" - Shows username and password on the password list and popup, if option is checked.
"Show passwords in plaintext" - Shows password in plaintext instead of "********" on the password list, if option is checked ("Show username and password in list" must also be checked).
Preparing a card
Insert a Funcard ((Funcard1-Funcard7 / PrussianCard1-PrussianCard5 or DragonLoaderCard (AVR)), and choose Format in the Tools menu.
Choose a master password for accessing the entire card (the master password can be changed later). It is recommended to use a strong password (at least 8 characters consisting of lowercase (a-z) and uppercase (A-Z) letters, digits (0-9) and special characters (!"#¤%/). If you don't enter a password, the card will be directly accessible when inserted.
Now choose a suitable name for the card, and press start. Formatting takes up to 2 minutes (depends on the size of the external EEprom), and erases the entire card, including any previously stored passwords.
If the CPU on the card due to any circumstance gets erased or overwritten, the repair button can be used to rewrite the loader on the card. All passwords are stored in the external EEprom and will therefore not be deleted by using the repair button.
If you entered a master password when formatting, you'll be prompted for the master password, when inserting the card.
After entering the (correct) password, all items will be displayed in the list. Empty cards will ofcourse result in an empty list.
Pressing the add button opens up the add item dialogue:
"Name" - Choose a name for this item (for instance "Webbank").
"Description" - Choose a description (for instance "Personal webbank account" or "www.webbank.com").
"Username" - Enter the username you use to access the service.
"Password" - Enter the password you use to access the service.
Whenever a password is needed, for instance for the webbank, open up the software or webpage you use to access the webbank and place the curser in the password-field.
Press F11 (or whichever shortcut key you chose in Settings) to bring up the password selector. Click the right item with the mouse (or use the keyboard and press enter).
If "Always paste password only" is not enable, a small dialogue asking whether to paste password, username or password + username will show. Click "Password" and the password will be inserted in the password field.
For maximum security, follow these basic rules.
- Choose a strong password as the master password for a card. If you loose the PasswordSafe smartcard or it gets stolen, somebody else can only decrypt the card and get access to your passwords by guessing the master password.
If you choose to use a blank master password (for convenience), the contents of the card is still encrypted, and therefore only accessible if another person knows it's a PasswordSafe card. Don't write "Infinity PasswordSafe" on the card.
- Choose a unique (and strong) password for each of your accounts, ie. one for your webbank, a different for your mailaccount etc.
Users often choose the same (simple) password for all account because it is easier to remember, but this leads to security problems if just one webservice gets compromised.
With the Infinity PasswordSafe you don't need to remember 10 different passwords.
- Remove the PasswordSafe smartcard when it's not being used. If you're leaving the PC for a while, take the PasswordSafe card with you.
- Do not let your browser store web passwords, and don't use the "remember me" function on some websites. If somebody steals your entire PC they'll easily be able to access all your personal information using the stored passwords.
Name, description, passwords and usernames are stored in the external EEprom on the smartcard, encrypted using a 128bit Blowfish algorithm.
No passwords or any other secure information is stored on the PC.
The size of the external EEprom directly determines how many sets (Name / description / passwords / username sets) can be stored on a card:
- Funcard / Funcard2 (AT90S8515 + 24C256) - 62 sets
- Funcard3 / PrussianCard (AT90S8515 + 24C128) - 126 sets
- Funcard4 / PrussianCard2 (AT90S8515 + 24C256) - 254 sets
- Funcard5 / PrussianCard3 (AT90S8515 + 24C512) - 510 sets
- Funcard6 / PrussianCard4 (AT90S8515 + 24C1024) - 1022 sets
- Funcard7 / PrussianCard5 / DragonLoaderCard AVR (AT90S8515 + 2*24C1024) - 1022 items
1.21 Build - Tuesday, July 12, 2005
(First public release)