New ID Vault Security Device
Posted by Erik Larkin | Wednesday, June 21, 2006 1:20 AM PT
Guard ID Systems announced a new USB device designed to help protect against phishing and online ID theft.
The $50
ID vault uses a smart card chip inside what looks like a padlock-shaped USB key. The USB connector snaps back into the case when not in use.
If you use Internet Explorer and Windows XP, the device automatically fills in the appropriate login details for a given site after you type in one master PIN. It also checks the IP address of a bank or other financial site you visit against an online database of actual bank addresses, and makes sure you're connected to the right site before sending any account details.
During a demo yesterday, the software interface looked pretty smooth and well-integrated. If you visit a financial site it knows about, you'll get a pop-up asking if you want to set up your login with ID vault. Or you can set up the login by starting with their wizard and choosing a given bank or other site.
For non-financial sites like webmail or forums, the device will store your login but doesn't do an IP address check.
In addition to the initial $50 cost, there's a $20 yearly recurring fee that the company says is for maintaining the IP address database. Also, it only works with Internet Explorer, and you'll need to install drivers on a given PC to use it.
The ID Vault is currently shipping to CompUSA, Best Buy and Circuit City.
Twenty bucks a year? Forget it. Not ready for Prime Time.
No offense, really, but this might be a good thing for really naive users. My fear would be that the thing snaps shut on you at a time when you really need it because you forgot to up the twenty bucks (though I'm sure you'd be reminded, but you know how we can be sometimes).
It seemed like a really nice idea until I read down to that part.
Having to install drivers on a pc before you can use it means that you cannot connect to sites 'on the go'. which limits the use for at home or at work.
Good idea, bad implimentation.
Just bought the product, pretty cool device. It took about 5 minutes to get it set up and I've saved 15 of my sites already. So far so good.
don't think the guys above know what this is. very cool device that connects to most sites, but really designed to securely get you on to the financial sites where the most damage can be done to your identity. I have the product, works easy, simple install, and the technology behind it seems pretty cool. smart card, encryption, and i like the design. $20 to get all my bank and brokerage accounts locked down seems very reasonable. i would rather pay that then the $$ every year to Norton or McCaffee. buy the product, i think you will come around, it is really very cool
has anyone else been using this device, this is fantastic
i just started using it. i think the first guys jsut commented, they did not buy one so they are not credible. this is really cool. the set was easy, although i had difficulty with 1 site so i am waiting to see how their tech support is. but this is far better than anything i have ever seen for an average consumer. when i showed it to a friend of mine who works at RSA, a big security company he also said that the device was far ahead of Norton and Mcaffee and people like that. i like this thing
Sounds great but 3 concerns:
- To verify the site where password is entered, site details must be sent to GuardIdSystems. What do they do with this information?
- How realy secure is the favorites list?
- Can't find an indepth review/test of product/security.
I also, like Horatio, would like to know what GuardIdSystems does with the site information? What guarantees are there that this device will keep my private information safe? How safe is it...is it accessable to employees there???
Sylvia
Horatio & CoastalBreeze: The information isnt actually sent to GuardID Systems, the information, in form of IP address is checked against their database of 'safe' IP addresses. GuardID Systems does all of the leg work checking and monitoring IP Addresses as they change so that the ID Vault is secure when siging you on. YOUR personal information remains on the ID Vault, which is plugged into your computer, not actually IN your computer, thus no one, can read your personal information, not even the folks at GuardID Systems.
I have been using this device for close to a year. I agree that there is room for product improvement, but when ISNT there? I mean, how can you argue paying $20 annual fee for something that both stores AND protects all my logins? I have yet to see a prpduct out that can compete in this space. i even bought another one to use as a backup system.
Some questions:
1. I have more than one computers and I do log-in to the web site from all of them. How does ID Vault work or do I need more than one ID Vault?
2. What if I have lost my ID Vault, how do I log-in to the web site?
3. I had a fingureprint reader. What is the difference between ID vault and fingureprint reader?
Thanks for the answer.
Yi
Some questions:
1. I have more than one computers and I do log-in to the web site from all of them. How does ID Vault work or do I need more than one ID Vault?
2. What if I have lost my ID Vault, how do I log-in to the web site?
3. I had a fingureprint reader. What is the difference between ID vault and fingureprint reader?
Thanks for the answer.
Yi
I haven't bought it but don't intend to either. I submitted a couple of questions to the ID Vault folks thru their web site and got a reply a couple days later... trouble is, the reply was to someone else's question, included his email address, his question, info that he banked at BofA... oh, and they didn't have a good answer for his question either. Seems they have a serious privacy issue on their website so I gotta wonder.
For $30, you can get TurboPasswords from Chapura that does essentially the same thing. In software, it securely stores your internet addresses, login and passwords - enters them for you in Internet Explorer or Firefox. It also has a host of useful other features - secured backup, password generation, etc. An there's no annual fee. Their support and upgrades have been free since my purchase.
GuardId, the maker of ID Vault, in my opinion, is shooting itself in the foot with the annual renewal fee for ID Vault. Each unit, indluding a backup, will cost you $39. If you run 4 computers all the time and want duplicate ID Vaults, it will cost you about $160 yearly. Note that each unit has it's own unique identifcation number to insure that your renewals apply to ONLY one unit.
The best thing about ID Vault is that it protects you from spyware keyloggers, but you get the same benefit from Roboform without the hardware and for a lot less money to buy and the additional copies are less expensive than the first one. In my view Roboform is more flexible. Both approaches require a learning curve. I own 2 ID Vaults. I would not have bought them if I were aware of the large annual renewal fees. I will retire both of these units when renewal time rolls around.
GuardId has shot itself in the foot. Just my opinion.
Hugh
GuardId, the maker of ID Vault, in my opinion, is shooting itself in the foot with the annual renewal fee for ID Vault. Each unit, indluding a backup, will cost you $39. If you run 4 computers all the time and want duplicate ID Vaults, it will cost you about $160 yearly. Note that each unit has it's own unique identifcation number to insure that your renewals apply to ONLY one unit.
The best thing about ID Vault is that it protects you from spyware keyloggers, but you get the same benefit from Roboform without the hardware and for a lot less money to buy and the additional copies are less expensive than the first one. In my view Roboform is more flexible. Both approaches require a learning curve. I own 2 ID Vaults. I would not have bought them if I were aware of the large annual renewal fees. I will retire both of these units when renewal time rolls around.
GuardId has shot itself in the foot. Just my opinion.
Hugh
Bought idvault since the idea seemed neat with both soft and
hardware security. I had problems with signing on to my bank and
the answer I got was that I needed to allow for cookies. This
created a problem as my anitspyware program deleted all the cookies. idvault also did not like PayPal and I never did get an answer to that problem. For these reasons I decided to return the application and was lucky I got a refund.
I Just got it !
I like it so far. makes me feel secure even thou I don;t know if it works.
I had that question also about if IDGUARD people can see your information..?
Something happen I know where to start my Investigation..