Skip to content

Yubikey:Two Factor or Third Party?

There are a lot of USB drives aimed at improving login security. The Yubikey is my favorite. It is compact and smart, and now you can use it to sign in Passpack.

Tara met Stina Ehrensvärd, CEO & Founder of Yubico, during Red Herring’s ETRE 2008, in Stockolm. In that occasion, Stina gave a Yubikey to Tara. I pondered it for a while, and now we have finally decided to do an integration. Actually… two.

You can use the Yubikey either as a Two Factor Authentication between your Passpack Password and Packing Key… or you can use it to replace the Passpack Password and skip straight to the Packing Key.

The Yubikey in action

Option 1: Yubikey as a Third Party Login

As usual, if you want to associate the Yubikey login to you account, go to Account > Associate Another Login and start the process (how to).

thirds

If you are not already a Passpack user, you can create an account directly using one of the supported Third Party Logins, now including Yubikey. Of course, I strongly suggest to have a standard Passpack account as well for back up. In fact, in the case that it is not possible to access your Third Party service  for any reason (did you loose your Yubikey?), will then be able to access your account via the standard sign in process. Alternatively, you could associate al least two Third Party Logins.

Option 2: Yubikey as Two Factor Authentication

This is for people who want to further secure their access to Passpack.
To configure your account to use Yubikey, simply go to Settings > Two Factor Autentication. You will see the following screen.

twochoice

Choose the second option and press Continue. Passpack will then ask you to press your Yubikey and … you’re done.

Please note: Some Internet Cafès or public computers may not allow you use a USB drive for fear of keyloggers. In these cases, you will not be able to access your Passpack account from those computers.

Double Thanks, with Two Factor Authentication

While Americans were feasting on turkey and stuffing yesterday*, Francesco was back in Italy putting the final touches on the next release: Two Factor Authentication.
This is a first roll-out using a  one time code which will be sent to you via email during sign in to your Passpack account. You can choose the email you’d [...]

Issues with Help Ticket System

Today I discovered a strange issue with our ticket system. In the last two months, it randomly marked some tickets as “closed”. So we didn’t answer them because we didn’t know of them.
I had a look to the “false closed” tickets and I saw that the most of them were requests for deleting the account [...]

Google Friend Connect Support is Ready!

As you probably know, two days ago a user alerted us about an issue with the access via Google/Gmail procedure.
We temporarily sidestepped the problem avoiding the creation of new accounts via Google/Gmail, and immediately after this, started to work on the support of Google Friend Connect.
It was a bit complicated because Google Friend Connect doesn’t support [...]

Changing the Google access to Passpack

This morning a smart user alerted me about a security issue in using Google/Gmail to access to the Passpack account.
I analyzed it and I discovered that Google has changed how Gmail authentication works, causing the library we use to fail. As result of this, we are preparing to support Google Friend Connect. In the meantime, [...]

Server Update: www2.passpack.com

Just a quick notice. We just ran a migration on a few of our servers. The updates are now complete, all went well.
Due to some DNS issues, you may temporarily be redirected to https://www2.passpack.com (notice the 2) we just wanted to let you know that this is OK. You may login and use your account as [...]

Features, Tricks, Fixes & Some Beta Tester Love

Happy Autumn! We sweat our way through the end-of summer heat and just rolled out a series of little fixes, features and tricks.

More Auto-login Improvements
We’ve managed to nearly complete the browsers compatibility list. After the last release, a few users were concerned that the Passpack popup was being blocked by NoScript. Francesco and Giorgio Maone [...]

Auto-login 2.0 Follow Up: Switch Versions

The Auto-login 2.0 release is going well so far. But we’ve found some special cases when you might prefer version 1.0. So we have added the option to switch between versions.
When Would This Be Useful?
First case. The new Passpack It! button works well on Firefox 3+. However certain plugins, for example NoScript, may cause it [...]

Internet Security Blog Directory