Best tools for protecting passwords

By , Network World |  Security

The managed console includes the cloud synchronization service called Everywhere. This means that every hour (or more often if you change the default), users' passwords are synchronized from their vaults, so they can access them from whatever device they choose. There is another add-on module called 2Go, where you can copy your password vault to a USB thumb drive and move it around. And there is also a Web client, which is useful on a borrowed PC for example.

The tool comes with a browser plug-in that can access its features like other products reviewed here, including bringing up a complex password generator and a button to force synchronization with its cloud service. The plug-in also contains various menus, such as for configuration control, to set up new logins, and to support a Windows biometric fingerprint reader.

You can set up autologoff time outs for screensavers or when the PC goes into standby, as most of the other products reviewed here also can do. One differentiation is that it creates a portal start page where you can directly click on your saved logins, similar to how Single Sign On products operate. You can save both files and logins to its vault, and you can also assign files to particular users or groups for secure collaborations.

The product has the second widest mobile OS support, including iOS, Android, BlackBerry, and Windows Phone. It supports Chrome, IE, Firefox and Opera browsers and has a status screen showing you which browser plug-ins have been installed, although IE information is segregated to another set of screens for some odd reason.

The Enterprise version of RoboForm includes the ability to recover any of your user's master passwords, because they are stored encrypted on a network share. This is something most of its competitors currently lack. It also has the ability to bulk import Active Directory users to help with the initial setup.

TrendMicro DirectPass  

Like the other consumer-grade tools, DirectPass has no enterprise management features. It also had the fewest overall features and the most issues in its use, and we would recommend that you wait until its next release before seriously evaluating it. For example, of the six products tested, it was the only one that didn't include a password generator. Trend promises to include this feature in its next release. Instead, it just captures logins from when you bring up a Web browser session. There is no way to manually add the website and its associated password to a separate list.

DirectPass synchronizes your vaults through its own cloud-based service, which is simple. Its vault can contain text files and also general Web form data. You can force the synch through buttons on the interface, or it should automatically do so when you bring up the software.

Originally published on Network World |  Click here to read the original story.
Join us:






SecurityWhite Papers & Webcasts

See more White Papers | Webcasts

Answers - Powered by ITworld

Ask a Question