PicturePassword: Picture-Based Unlocking

[Janak Parekh]

<div class='os_post_top_link'><a href='http://www.picturepassword.com/otp_features.html' target='_blank'>http://www.picturepassword.com/otp_features.html</a><br /><br /></div>I talked about a similar concept <a href="http://www.pocketpcthoughts.com/forums/viewtopic.php?t=15657">a few months ago</a>, and it's nice to see that someone has implemented a visual security system for Pocket PCs. The concept here is that instead of typing a password, one would touch a certain "spot" in a picture. The software has means to prevent guessing, as well.<br /><br /><img src="http://www.pocketpcthoughts.com/images/web/2003/parekh-20040211-PicturePassword.gif" /><br /><br />Has anyone given this a spin?

[brianchris]

Hmmmm......I'm interested. I'll be waiting to hear other people's thoughts and opinions, especially those that have used this or similar apps.

-Brian

[Kati Compton]

I've heard of a similar type of password protection (in general, not on PPC), but usually it involves a *series* of spots on a picture. Like they show a refrigerator, and you choose a series of foods.

[reydiodj]

- actually, I've been awaiting the WM2k3 version before I review it for my next meeting/announcement.

[possmann]

I like the idea, but haven't heard anyone trying it as of yet...

I like the picture too...

[mhskateboarder]

looks pretty interesting to me. i might try and install it sometime this week

[arebelspy]

Visual Key (visKey) (http://www.viskey.com/viskeyppc/index.html) is the best for this. It does cost $15, but it's way more secure than one tap.

It's much safter than regular passwords,

AND it was just updated 2 days ago!

PocketGear Link (http://www.pocketgear.com/software_detail.asp?id=6761).

-arebelspy

[Brad Adrian]

I just installed it, and it's pretty nice. You're given several ways to unlock your device, like a backup code or hardware button sequence. But, it would be nice if there were some way of setting the sensitivity, say, in the pixel-width of the desired tap zone. Or, if you could define the zone yourself, like drawing a circle around the car's headlight to define it as the hot zone.

As it is, though, I tapped the headlight area of the photo to set the hotzone, and it looks as though that's just about the size of the area it creates.

[Gerard]

Um, guys, SFR did this more than 2 years ago, and very welll too:
http://www.viskey.com/viskeyce/index.html

I spent a fair bit of time beta testing for these folks, and they're a good crew. Really responsive, solid programmers. The final release product was rock solid. Unfortunately, my memory just isn't good enough nor is my need for device data security such a worry that I feel like using this. I stopped shortly after the beta sessions were over. But for anyone needing billions-to-one odds against a brute-force attack, with password-secured Activesync connections as well, this is the way to go. They supply a free PC-based image editor too, in case you can't crop whatever image you like on your PPC using PQV or Pocket Artist or whatever.

[Janak Parekh]

Um, guys, SFR did this more than 2 years ago, and very welll too:
http://www.viskey.com/viskeyce/index.html
Well, no one submitted it before. ;) Thanks for the link though.

--janak

[Jimmy Dodd]

Um, guys, SFR did this more than 2 years ago, and very welll too:
http://www.viskey.com/viskeyce/index.html
Well, no one submitted it before. ;) Thanks for the link though.

--janak

It's been mentioned in the forums on more than one thread (search on "viskey"), but I guess no one actually submitted it as news. Oh well...

[arbitrajeu]

But, it would be nice if there were some way of setting the sensitivity, say, in the pixel-width of the desired tap zone. Or, if you could define the zone yourself, like drawing a circle around the car's headlight to define it as the hot zone.

I think that depends on the sensitivity you set - finger, nail, or stylet. These give varying size active zones.

[arbitrajeu]

It does cost $15, but it's way more secure than one tap.
You can set up to 5 taps with PicturePassword.

[Kevin C. Tofel]

Easy install and customization. Comes with a few pictures and easy to add your own. I copied over a pic of Lance Armstrong and used a simple 2 tap "key". Entering the correct sequence and areas of taps works well. Also tested 2 random taps....takes me to the standard 4 digit password screen as a backup and works well.

One minor issue......I set my passcode to 2 taps (which can be 1 to 5, depending on your preference). By taking me to the 4 digit password screen after 2 bad taps, I've just indicated to a would-be data thief that it takes 2 taps to unlock my device. Perhaps the program should allow you to enter more "bad" taps before taking you to the password screen....thereby hiding the number of taps....

Overall, very nice!

KCT

[Gerard]

In VisKeyCE, you set the password length you like. Then you train inputting that password tap combination, and set it. When you have the program active, it shows just the image you used and the time, along with the lower toolbar options. Tap 'Login' when you think you've got it right. If you're wrong, you get this message.

http://www.luthier.ca/other/forum/viskeyce_wrong_password.gif

If you tap once too many times, you get the second error here. It doesn't exactly say by how many. Could be you tapped 10 times and the password sequence is only 4. But obviously a process of elimination would get you that information.

http://www.luthier.ca/other/forum/viskeyce_too_long_password.gif

I meant to do a full review of this thing, but then got busy and all... And then last week someone was asking about something like this so I tried installing it again. Seems they've changed their registration coding setup, as the newest version won't register with my old data. Oh well, I don't really want to use it anyway. Just got reminded of it, and now again today, and it sort of made me sentimental.

[Brad Adrian]

I think that depends on the sensitivity you set - finger, nail, or stylet. These give varying size active zones.
OOOOOOH!!! I didn't really understand what those settings were for. So, presumably, setting it to "finger" enables a larger zone.

[retrogamer]

they will get sued, because this "idea" is already patented many many years ago.

[rberry88]

Hmmm, tried to install the Picture Password program from SoftAVA and the installer says it is not compatible with the Ipaq 5000 series (I have the 5455). Looks like I'll have to try the other one.

rberry88

[SD-Realtor]

I just downloaded Picturepassword, and I think I like it. I don't need some super secure set-up, and would not usually use a password on a regular basis, but the 1 touch on the screen is so simple that I would certainly have it enabled at all times! Why not have that extra protection? I never know when someone might pick up my ipaq and go snooping around.

Anyways, if I'm seeing it correctly, there is a $15 charge to register Picturepassword. That means both the viskey and this are the same cost. I'm hoping to see a little more feedback so I can figure out which one is better. I like the display with the clock on this one, but haven't yet tried or heard much about viskey - except that it is may be more secure.

Any more input from users of either program would be appreciated! Thanks!

[Ackibat]

A picture is worth a thousand passwords.

[stevehiner]

I've been searching for this type of solution since I got my iPAQ. I LOVE the idea of using a graphic password.

I have found a really annoying problem with VisKey and a deal-breaker problem.

Really Annoying problem: if you're running a full screen game (Atomic Cannon for me) and you let the system power off long enough that the password screen comes up prepare to do a soft reset. When the system powers up the game screen will be in front of the VisKey screen but VisKey traps all the input so you can't close the game but since you can't see VisKey you won't be able to enter your password. Official response from VisKey is "don't let your system power down while playing a game or just reset it if it does."

I can sorta live with that, except for one thing...

Deal-Breaker problem: The same thing happens with reminders. I just had a reminder go off. I look at my screen and see VisKey but the reminder appears to have trapped the input so I can't get VisKey to go away. Of course the whole time my iPAQ is beeping up a storm. I reset the device and this time the reminder came up on top of VisKey so I was able to clear it and log in. I'm just glad I didn't discover this problem during a movie or Church or somewhere 30 seconds of beeping would have been really embarassing.

I'm going to remove VisKey now and test PicturePassword extensively for this kind of problem before buying it. I'm really glad I didn't pay for VisKey yet (I was planning to).

[Update] VisKey wrote me about this and said that if the reminder pops up under the VisKey screen you should only have to turn the PPC off and back on to get the reminder on top - a soft reset shouldn't be needed. I haven't tested their solution since I already removed VisKey from my system.

[juan_chiriboga]

After having un-installed it, my System Password Icon under the settings screens disappeared. anyone seen similar behavior?

[Gerard]

Done a soft reset yet to recover that applet? I don't recall the older VisKeyCE doing that, but perhaps I just didn't note it because I never use that password thing. I did try something called CardPass last week, another security app which uses a particular insertable card you choose as a passcard. It too removed the system password applet from use. When I'd disabled cardpass and soft reset, the password icon was again accessible. I found CardPass a bit hard to understand, though I suppose I'm just missing something obvious. It seemed only to work for me on soft resets, offering nothing in the way of security just with power-on. Maybe I didn't set up the timeout correctly....

[Steven Cedrone]

After having un-installed it, my System Password Icon under the settings screens disappeared. anyone seen similar behavior?

Is this a coincedence? You are the second person I heard mention that their password Icon dissappeared today (to be fair I don't know why the first person lost theirs though)

To recreate the missing icon do this:

On your Desktop -
Select Run from the Windows Start menu
Type notepad.exe.
Click OK.
Enter the following:
20#ctlpnl cplmain.cpl,1
Select Save As from the File menu.
Type "Password.lnk" as the filename, without the quotes. Save it to a location you will remember. Now copy it to your Pocket PC ( Windows, Start Menu, Settings)

That will get you back up and running, I think ;-)

Steve

[SD-Realtor]

Steve Hiner -

Thanks for that input on Viskey. That's a problem that I probably would not have noticed for some time down the road (until after I paid). That's enought to keep me away from it - as I think all those unnecessary soft resets would just get annoying after a while.

I just tried the same type to thing with picturepassword - having a game open and letting it turn off on it's own. When I turned it back on, I hit the spot on my password picture, and it went right to the game, as it should.

I'm currently testing an appointment reminder... Yup, that worked. The reminder turned on the iPAQ, and placed itself in front of the picturepassword. I was able to hit dismiss, and the reminder then went away. I then had to tap the correct spot to get past the password. Perfect in those ways.

Let me know what you think once you try Picturepassword.
Thanks!
Jeff

[juan_chiriboga]

Thanks for the help. However the lnk with the command
20#ctlpnl cplmain.cpl,1

doesn't seem to be working. any thoughts?

[Steven Cedrone]

Thanks for the help. However the lnk with the command
20#ctlpnl cplmain.cpl,1

doesn't seem to be working. any thoughts?

Hmmm...

I tested it on my Pocket PC as I was posting, it worked for me. What kind of Pocket PC do you have?

Steve

[dutchcfi]

I'm about to upload a review on PicturePassword shortly to www.PocketPCReviews.net

Cheers,
Martin



I just downloaded Picturepassword, and I think I like it. I don't need some super secure set-up, and would not usually use a password on a regular basis, but the 1 touch on the screen is so simple that I would certainly have it enabled at all times! Why not have that extra protection? I never know when someone might pick up my ipaq and go snooping around.

Anyways, if I'm seeing it correctly, there is a $15 charge to register Picturepassword. That means both the viskey and this are the same cost. I'm hoping to see a little more feedback so I can figure out which one is better. I like the display with the clock on this one, but haven't yet tried or heard much about viskey - except that it is may be more secure.

Any more input from users of either program would be appreciated! Thanks!

[SD-Realtor]

After having un-installed it, my System Password Icon under the settings screens disappeared. anyone seen similar behavior?

Is this a coincedence? You are the second person I heard mention that their password Icon dissappeared today (to be fair I don't know why the first person lost theirs though)

To recreate the missing icon do this:

On your Desktop -
Select Run from the Windows Start menu
Type notepad.exe.
Click OK.
Enter the following:
20#ctlpnl cplmain.cpl,1
Select Save As from the File menu.
Type "Password.lnk" as the filename, without the quotes. Save it to a location you will remember. Now copy it to your Pocket PC ( Windows, Start Menu, Settings)

That will get you back up and running, I think ;-)

Steve

Steve - Help! I have a 1945, and am having the same problem. My trial expried, so I uninstalled the picturepassword program, but now my password icon is gone and my password is still required. I tried what you said above, but am having no success. (you save as Password.lnk - and you save as type "all files", so it is not Password.lnk.txt - right?) Then do you save the encoding as "ANSI", or "Unicode", or "Unicode big endian" or "UTF-8". I left it as the default at ANSI. I am putting it into the windows - start menu - settings, and a folder is showing up on my pocketpc under settings - system, with some strange rectangular picture on the folder. I have no ability to open that folder. Please help me out, as I would like to have access to my password setting again.
Thanks!

It seems like it is close, but something must be just a little off. The password icon is showing up in the right place - under settings, but is not linking to the correct thing. Thanks for your help in advance.

[Steven Cedrone]

Steve - Help! I have a 1945, and am having the same problem. My trial expried, so I uninstalled the picturepassword program, but now my password icon is gone and my password is still required. I tried what you said above, but am having no success. (you save as Password.lnk - and you save as type "all files", so it is not Password.lnk.txt - right?) Then do you save the encoding as "ANSI", or "Unicode", or "Unicode big endian" or "UTF-8". I left it as the default at ANSI. I am putting it into the windows - start menu - settings, and a folder is showing up on my pocketpc under settings - system, with some strange rectangular picture on the folder. I have no ability to open that folder. Please help me out, as I would like to have access to my password setting again.
Thanks!

It seems like it is close, but something must be just a little off. The password icon is showing up in the right place - under settings, but is not linking to the correct thing. Thanks for your help in advance.

Are you saying that you can't get on your device right now? Or do you just want to create a new password, but the icon is missing?

Steve

[SD-Realtor]

Are you saying that you can't get on your device right now? Or do you just want to create a new password, but the icon is missing?

Steve

Steve - I can get into my device by way of my 4 digit password, but the icon is missing so I can no longer disable the password or change it. That's the current issue. When I put in the .lnk that you mentioned, it did bring up an icon in my settings, but it's not the right one and doesn't do anything. :?
Any help is appreciated.
Thanks!
Jeff

[Steven Cedrone]

O.K., if editing them yourself does not work, try this: go to this discussion (http://discussion.brighthand.com/showthread.php?s=&postid=521990#post521990) on Brighthand and download the .zip file with the control panel icons/links. Move the password link to your Pocket PC and see if it works...

(make sure you put CPLIcons.dll in \Windows)

Steve

[SD-Realtor]

O.K., if editing them yourself does not work, try this: go to this discussion (http://discussion.brighthand.com/showthread.php?s=&postid=521990#post521990) on Brighthand and download the .zip file with the control panel icons/links. Move the password link to your Pocket PC and see if it works...

(make sure you put CPLIcons.dll in \Windows)

Steve
Steve- Thanks for the info... I tried to do this, step by step, but for whatever reason it still is not working. It's like the code is wrong or incompatible with my 1945... I get a password icon (but not the right one) that is completely non-functional in my settings/system area. I believe it is supposed to go into the settings/personal section of the ipaq. Is there any long way to access the password - by not using the shortcut? I tried to re-install the picturepassword program, and it won't go, saying that "Picture Password can not be installed until system password is enabled. Disable system password and repeat setup." I am not able to enable or disable the system password since I can't access or find the setting - and I now have the unwanted required 4 digit password enabled.
Do I maybe have to do a hard reset? I don't really want to do this cause I have so many different programs and settings in place that I don't want to lose. I have recently done the standard Activesync backup, but I haven't done a restore and a bit nervous that I might lose settings or programs (but it might be the answer - I am just a worry wort and unedeucated on the process).
Please let me know your best idea - do you think I should just hard reset? (would that even bring the icon back?) Or should I do the Activesync Restore (does this restore it back to where it was when I last ran the back-up?)
Thanks alot for your help. Strange that it's not working, but I hope to get around this somehow.
Thanks again for your time - Jeff

[Steven Cedrone]

Let me look around before you do a hard reset (BTW, that should restore your icon, until you resore your data - not sure if it would dissappear again). In the meantime, contact the Picture Password people, explain what happened, and see if they can help. I'll get back to you here...

Steve