Universal Supplies Co.

Note: Our USC-Password Security System Version 2.5 is available with function to avoid Keylogging threat.

Suggestion to maximize safety with our USC-Password Security System Version 2.0

This suggestion is suitable for all versions, viz. Advance, General and Light Versions.

The task is simple. Just to keep our passwords in encrypted form so that it is not easy for crackers etc. to rob our belonging.

We always stress that there are no hundred percent safeties in the world. Announced cases include web sites of banks, high technology sites and even government had been hacked or spied.

Besides we have to design the best way possible so that our customers' passwords can be more secured, customers can do their part to make it even more safer.

PASSWORD

It has been mentioned by experts or our banks etc. that we have to change the password in certain period. This is a good suggestion, but a bit hard if we do not have a system to record it. So that would not be difficult for our customers.

Strong password is either longer than seven in length or a mixture of letters and digits. We must not choose any password of names or any words with meaning. Do not use available programs to create random password because crackers have them too. It is certain that crackers are experts and they do know what we have.

USE OF OUR PROGRAM

All versions of our Password Security System have the same fields, Website/reference, Login and Password.

Customers may find that even with the wrong Numkey, the Login is displayed properly. It is not a mistake, instead, it is a part of the security.

Login name is always created according to our names. We do not have a login name like GeorgeBush if our name is not George Bush. It is easy to recognize which one belonged to us.

We do not worry if the data file (text file for Light Version) was stolen because without the program, one cannot find the login names and passwords. But if someone can reach our PC and use the program to find our passwords, then we have to find a way to protect the passwords.

The Numkey is the vital element. However, one can try with 1 to 200 to look for. If the login name and password would be displayed properly together, then it is like telling the person that by getting a possible login name, then the password is the right one.

So when the original login name always displayed in proper form, there is no way to prove which password is the correct one.

Now let's see what is needed to steal our bank accounts etc.

It is about online. So one needed to know which are the web sites, the login names and passwords in order to commit his/her crime.

If web site and login name is in his/her hand, then he/she has to try many times because he/she does not have the exact password. How many times would a bank's web site allow for wrong password? They should not allow numerous fault trials. Just like the ATM, if we entered several wrong passwords, the card will be swallowed.

Although the Web site/reference is not encrypted, yet it does not mean that we have to enter the exact one. It is just for us to know what the login and password is related to.

We can use a substituted word for that. If we have two current accounts with the bank, then we can use Bank Current One instead of the bank's name and the account number.

SINGLE NUMKEY

For Light Version, this is the only choice. For General and Advanced Versions, it is one of the choices.

Of course, we have mentioned that users must use the same Numkey in order to find the proper password. Even that can be a way for us to increase the safety.

We can use one Numkey for a group of passwords and another Numkey for another group. That means with a Numkey, we can find a group of passwords correctly displayed and the other group of passwords incorrectly displayed. It is like saying that we should not put all eggs in a basket.

For users of General and Advanced Versions, the Individual Numkey is used for each password record. We are sure that some customers may use the same Numkey for a number of records.

With this arrangement, even the Light Version can enjoy a higher security.

SUMMARY

Our Login name arrangement is already a way to avoid losing our passwords to someone who can access our PC.

If we do enter something that we can understand for the Website/reference, then it is not easy for crackers to know what it is.

If we use different Numkey, then we shall avoid the risk of losing everything together.

Our suggestion is not to say the General and Advanced Version will be the same as the Light Version. The difference is the individual database for General and Advanced Version and the Blocking function of the Advanced Version.

The encryption and protection of password data must be the same for all versions. If depends on different situations to choose only.