Cyber Protection for Travelers

KeePass Password Safe - a secure password manager for your sensitive login information

Do you worry about cyber crime and identity theft when checking e-mail, credit card charges and online banking in Internet Cafes? I do.  It’s the main reason I avoid accessing personal information on a public computer.  KeePass,  a free/open-source password safe which helps you to manage your passwords in a secure way, might just be the answer to lugging along a laptop. With KeePass, you can put all your passwords in one database, which is locked with one master key or a key-disk and remember one single master password to unlock the whole database. The databases are encrypted using the best and most secure encryption algorithms currently known (AES and Twofish).

It allows you to organize your entries into categories and offers several ways to conveniently enter your username/password; you can use drag and drop, copy to the clipboard, or create auto-type sequences that can enter the login information with a single click.

For more information: www.keepass.info

Comments

[Marco Barulli]

Dear Ellen,

I just read your post about "Cyber Protection for Travelers". KeePass is certainly a very good password manager, but I would like to introduce Clipperz to your attention.

Clipperz is a web-based open source password manager that can offer an even better protection to travelers.
http://www.clipperz.com

Clipperz is particularly useful when you need to access online services (webmail, banks, ...) from an unsecure computer (e.g. hotel, internet cafes, libraries, ...)

This post explains how it works.
ttp://www.clipperz.com/users/marco/blog/2007/10/10/defeat_keyloggers_one_time_passphrases_plus_one_click_logins

Below you find a brief overview of Clipperz features, security and privacy. I would be honored to know your opinion, no matter if privately or on your popular and interesting blog.

Best wishes,
Marco

========================
WHAT IS CLIPPERZ?
You can think of Clipperz as your digital Rolodex, a card index where you can enter any sort of confidential data without worrying about security.
http://www.clipperz.com/learn_more

It can be used to store and freely organize passwords, confidential notes, burglar alarm codes, credit and debit card details, PINs, software keys, ...

Clipperz users can save the details of their online services into Clipperz and quickly create a "direct login" link for each of them: just one click to authenticate and access the online service without typing any username and password. Highly addictive! :-)
http://www.clipperz.com/support/user_guide/direct_logins

Clipperz is completely anonymous. No email required. Nothing to install. Nothing to backup.

Clipperz also includes an offline version. Users can dump their encrypted data from Clipperz servers to a local hard disk or USB drive and create a read-only version of Clipperz to be used when no Internet connection is available.
http://www.clipperz.com/support/user_guide/offline_copy

========================
HOW IS CLIPPERZ REVOLUTIONARY?

Clipperz is the first "zero-knowledge web application"! Clipperz knows nothing about its users and their data. Not even their usernames!

We got used to trust online services with our data (photos, text documents, spreadsheets, ...), but Clipperz proves that this is not necessary: users can enjoy a web based application without the need to trust the web application provider.

Clipperz lets you submit confidential information into your browser, but your data are locally encrypted by the browser itself before being uploaded. And the key for the encryption processes is a passphrase known only to you!

Clipperz is simply in charge of delivering the Ajax code to your browser and then storing your data in an encrypted form on its servers.

Clipperz does not use homemade cryptographic algorithms but implements standard encryption schemes (AES256 for encryption, SHA256 for hashing, Fortuna as PRNG, SRP for authentication, ...).
http://www.clipperz.com/learn_more/crypto_foundations