Digital & Secure: FlexWallet 2005 Reviewed

[Dave Potter]

<img src="http://www.pocketpcthoughts.com/images/web/2003/FW2LandscapeTemplateMgr.jpg" /><br /><br /><b>Product Category:</b> E-wallets, Security<br /><b>Manufacturer:</b> <a href="http://www.twopeaks.com">Two Peaks Software</a><br /><b>Where to Buy:</b> <a href="http://www.handango.com/brainstore/PlatformProductDetail.jsp?siteId=311&productId=123849">Handango</a><br /><b>Price:</b> $24.95 USD<br /><b>System Requirements:</b> Desktop version is compatible with Windows 95, 98, Me, XP, 2000, Windows Server 2003. Mobile version is compatible with Pocket PC 2002, Windows Mobile 2003, Windows Mobile 2003 SE, Smartphone 2002 and 2003.<br /><br /><b>Pros: </b><br /><li>Full Windows Mobile 2003 SE support including landscape and high resolution screen modes;<br /><li>Numeric and alpha-numeric password support;<br /><li>Stronger and more robust 128-bit encryption;<br /><li>Support for multiple sub-category levels;<br /><li>Free desktop companion software;<br /><li>Faster Performance.<b>Cons:</b><br /><li>Upgrade path for previous users is slightly more complex;<br /><li>Doesn’t lock down wallet after unsuccessful login attempts.<b>Summary:</b><br />Since 2002, over 20,000 users world wide have entrusted their sensitive personal and business data to FlexWallet – and with good reason. FlexWallet has firmly established its reputation as a user friendly, affordable and secure Pocket PC data storage solution for everything from credit cards and ATM Pins to online passwords and calling cards. So how does this latest version measure up that reputation? <br /><br />Let’s find out! <br /><!><br /><PAGEBREAK> <br /><span><b>Installation</b></span><br />First time users of this application will love the quick and easy installation process. The integrated installer takes care of both the desktop version and the Pocket PC version in one pass. No muss – no fuss. <br /><br />For previous users, though, the process is a little more complex. First of all, the new version does not overwrite older versions. It installs independently. So if you're like me, and forget to uninstall the older version first, you're left with two versions of FlexWallet on both your PC and your Pocket PC. (oops!)<br /><br />Secondly, FlexWallet 2005 does not recognize wallets created with previous versions of FlexWallet. This, however, should not be cause for panic since the old wallets can be quickly and easily imported and converted with just a few mouse clicks using the PC version of FlexWallet 2005. The details of this process are described <a href="http://www.twopeaks.com/site/products/FlexWallet2/ImportFwx.aspx">here</a>. Unfortunately, the Pocket PC version is not capable of performing this import / conversion process.<br /><br />OK – so now that you’ve got your data in a new 2005 wallet, how do you get it back onto your Pocket PC? Enter the ‘Wallet Synchronization Wizard’ which describes step by step how to change your ActiveSync settings to enable file synchronization. This is primarily intended for less experienced users. Us ‘seasoned’ users will already be familiar with this process. Once file synchronization is set up in ActiveSync and your wallet is saved in the appropriate synchronization folder on your PC, just sync your Pocket PC and you’re done. You can now use the Pocket PC FlexWallet 2005 application to open, view and modify your wallet.<br /><br /><span><b>Security</b></span><br />Unquestionably the most important aspect of any e-wallet is security. We are talking about some pretty sensitive information after all. Well, fear not, my friend! FlexWallet features 128-bit industrial strength encryption which is toted by Two Peaks as being “Stronger and more robust… because it generates multiple irreversible digital signatures from your password to encrypt your data”. I am not an encryption or security expert – but this sounds to me like it should be more than adequate for the majority of users.<br /><br />In addition to this, Two Peaks has added a new ‘Hybrid’ password system. Older versions only supported numeric passwords whereas FlexWallet 2005 supports both numeric and alpha-numeric passwords. Numeric passwords are easier to enter – but are less secure. Alpha-numeric passwords, on the other hand, are more difficult to enter through the Pocket PC SIP – but are much more secure. I personally prefer the numeric option – but it’s nice to know that there is an alternative. Another nice little add-on is the Password Generator which they’ve included in the PC version of FlexWallet 2005.<br /><br />One thing that I was disappointed not to find in FlexWallet 2005 was a lock-out safety protocol for multiple unsuccessful login attempts. FlexWallet does shut down after a set number of unsuccessful login attempts, but it does not lockup the application to block access from any would-be data thieves. This means that they are free to restart FlexWallet and keep trying. Not a perfect solution… Perhaps we’ll find this feature in the next version?<br /><br /><PAGEBREAK> <br /><span><b>The Interface</b></span><br />Two Peaks obviously subscribes to a ‘keep it simple’ philosophy and doesn’t clutter things up with redundant controls and buttons. With both the desktop and the Pocket PC versions, the interface is uncomplicated, sleek and extremely intuitive. <br /><br /><img src="http://www.pocketpcthoughts.com/images/web/2003/potter-jun04-flexwallet2005-1.gif" /><br /><i>Figure 1: The PC Interface – hierarchical view on the left and icon view on the right.</i><br /><br /><img src="http://www.pocketpcthoughts.com/images/web/2003/potter-jun04-flexwallet2005-2.gif" /> <br /><i>Figure 2: The Pocket PC Interface – icon view.</i><br /><br />In both versions, there are buttons for the creation of categories and individual wallets items (a.k.a. cards). One significant improvement to note over previous versions is the ability to create multiple sub-categories - several layers deep if desired. <br /><br /><img src="http://www.pocketpcthoughts.com/images/web/2003/potter-jun04-flexwallet2005-3.gif" /> <br /><i>Figure 3: The hierarchical view with multiple sub-category layers. Note that each category or sub-category can be assigned a different default card template.</i><br /><br /><PAGEBREAK> <br />Don’t like the default templates? No problem! The ‘Template Manager’ permits users to modify existing templates or create completely new ones with an unlimited number of fields. There is even a <a href="http://www.twopeaks.com/site/products/FlexWallet2/templates/default.aspx">template gallery</a> on the Two Peaks Web site.<br /><br /><img src="http://www.pocketpcthoughts.com/images/web/2003/potter-jun04-flexwallet2005-4.gif" /> <br /><i>Figure 4: The Template Manager. The Template Editor now allows you to edit, add, remove and rearrange template fields, even when you already have wallet items based on a particular template.</i><br /><br /><img src="http://www.pocketpcthoughts.com/images/web/2003/potter-jun04-flexwallet2005-5.gif" /> <br /><i>Figure 5: New Windows XP styled icons!</i><br /><br />And finally, FlexWallet 2005 now features complete support for Windows Mobile 2003 SE including landscape and high resolution modes. FlexWallet 2005’s on-the-fly screen orientation even supports upcoming square screen devices.<br /><br /><img src="http://www.pocketpcthoughts.com/images/web/2003/potter-jun04-flexwallet2005-6.gif" /> <br /><i>Figure 6: Windows Mobile 2003 SE Landscape support.</i><br /><br /><PAGEBREAK> <br /><span><b>Conclusions</b></span><br />I must admit that my initial impression of FlexWallet 2005 was somewhat reserved. I installed and tested the product prior to visiting <a href="http://www.twopeaks.com">the Two Peaks Web site </a> and thus had no idea what to expect. Initially, the product struck me as being more or less the same as previous versions with the same familiar interface. Boy was I wrong! Two Peaks has completely re-written this application from the ground up and incorporated a long <a href="http://www.twopeaks.com/site/products/FlexWallet2/Upgrade2005.aspx">list</a> of useful and necessary enhancements. Initial impressions aside, Two Peaks has done a brilliant job of mixing the familiar with the innovative to produce a top notch e-wallet application. So, does FlexWallet 2005 measure up to its predecessor’s reputation? Absolutely – and then some.

[PR.]

I can come up with another 'Con' to your list:

* File attachment feature disapeared :(

I only used it for a few of my cards but their was no mention of it on their site when you upgrade.

[drop]

Good review.

I didn't find the upgrading from older version to 2005 particularly complicated. Just a matter of exporting and importing cards.

But you are right, PR.. I didn't even notice, the file attachment is gone. Crap, I don't remember what or where I had attached files, but I did somewhere. Oh well, I guess if I couldn't recall then those files might not be so important.

I do miss the number pad password entry. Ah well, I still like the newer version.

[dmcostello]

I didn't even notice, the file attachment is gone. Crap, I don't remember what or where I had attached files, but I did somewhere. Oh well, I guess if I couldn't recall then those files might not be so important.


Some info from Twopeaks website:

When designing FlexWallet 2005, we conducted several polls and interviews with existing users of the previous version. We found that a majority of users did not find this feature useful or understand how it worked. Therefore, we decided to drop this feature in order to improve the overall performance of the product and reduce memory requirements. We realize that some people found this feature useful, and we are open to bringing it back in a future version.


I do miss the number pad password entry. Ah well, I still like the newer version.

You can set it up to use number password entry, ust change the password and choose the numberpad instead of the alpha-numeric password.

I like the alpha-numeric, the numbers-only seemed like it would be much easier to break into.

[Dave Potter]

dmcostello is correct. If you choose the numeric password option FlexWallet 2005 presents you with the number pad when you log into your wallet. However, the number pad seems smaller to me than in previous versions. Perhaps it's just my imagination. Does anyone else who has upgraded find the number pad smaller?

As for the file attachment feature - thanks for pointing that out PR. I never used that feature in previous versions and didn't notice that it was missing in FlexWallet 2005.

[lapchinj]

I wasn't much of a wallet type but the review was really good. Besides I'm a big fan of Billrate so I had to give this a try again.

Wallet made a big hit with me since yesterday when I read the review and downloaded the trial It's just as intuitive and easy to use Wallet as it is using Billrate. Although I'm holding off buying it since a major drawback is that there really isn't any import utility. I have at least 1000 or more registration/login type records in an Access database. This should be very big item on their todo list, I know it's a must for me. I'm probably luckier than most people in that I can hack together my own import utility in a few hours but that's an extra job I shouldn't have to do. They should at least import/export comma delimited files.

I can't compare it to older versions even though I've tried it (and others) before but the product looks real nice, intuitive and painless to use. I'm tired of all the pain fooling around with synching up my access files and the hassle that came along with just retrieving login information (and wasn't secure either) :bad-words: . This is a pleasure. :D

Jeff-

[JBPLCMS]

This isn't the most efficient, but it works. I've modified the templates for the cards that I want to attach a file and added an addtional web address field that I renamed "File Attachment" you can have as many as you want. I've tested this in files in memory and on SD and CF cards (I'm using a Tosh e800). The format looks like this:

To open a file in memory, type in the folder and file name, for example, to open a Pocket Excel file named Bills located in the My Documents directory, I type the following exactly as it is here:

my documents/bills.pxl

To open a MS Reader file on my SD card called enfr.lit, I type the following exactly as below:

sd card/enfr.lit

Hope this helps,

Joel

[ctmagnus]

Stronger and more robust 128-bit encryption

I thought version 1.x did 128 bit encryption as well. :confused totally:

[ctmagnus]

However, the number pad seems smaller to me than in previous versions. Perhaps it's just my imagination. Does anyone else who has upgraded find the number pad smaller?

It is smaller. Especially on the desktop.

[Marcel_Proust]

anyone compare this to
SplashData's newly announced SplashID 3.0 ?
splashid is cross platforms and has many import/export functions....i'm trying to decide between the two. any opinions?

[Dave Potter]

Stronger and more robust 128-bit encryption

I thought version 1.x did 128 bit encryption as well. :confused totally:

You are correct. Here is a quote from the Two Peaks website regarding FlexWallet 2005's 128-bit encryption:

"Stronger and more robust 128-bit encryption algorithms. Chances of data corruption are eliminated when you enter large amounts of text. The encryption system is more advanced because it generates multiple irreversible digital signatures from your password to encrypt your data. The previous version used a much simpler encryption system."

[Jason Dunn]

However, the number pad seems smaller to me than in previous versions. Perhaps it's just my imagination. Does anyone else who has upgraded find the number pad smaller?

It's much smaller, and that's one of my primary complaints about this version - one of the biggest reasons why I switched from CodeWallet Pro to Flexwallet was because Flexwallet offered but, easy-to-use-with-fingers buttons, and there was no need to click the wee "OK" button in the upper right corner. The developer, Mel Sampat, told me the reason why the pad is smaller is that it's designed to also work on square screen devices. He said he think it's possible to embed multiple UI elements and have the OS tell the app which one to use based on the screen resolution, but he has to get a 2003 SE device first and test this. So I think we'll see the big password screen come back (I hope so!), but it will take a while.

[JBPLCMS]

You can modify the dialog to make it bigger. It's dialog 168. I changed the dialog from 108x96 (height & width) to 120x132. Then I changed the buttons from 15x28 to 20x33. The sizes may be different on your machine, I'm on a Tosh e800.

[Jason Dunn]

You can modify the dialog to make it bigger. It's dialog 168. I changed the dialog from 108x96 (height & width) to 120x132. Then I changed the buttons from 15x28 to 20x33. The sizes may be different on your machine, I'm on a Tosh e800.

Via a registry hack? Cool, but severe. 8O

[Tomcat]

In addition to this, Two Peaks has added a new ‘Hybrid’ password system. Older versions only supported numeric passwords whereas FlexWallet 2005 supports both numeric and alpha-numeric passwords. Numeric passwords are easier to enter – but are less secure. Alpha-numeric passwords, on the other hand, are more difficult to enter through the Pocket PC SIP – but are much more secure. I personally prefer the numeric option – but it’s nice to know that there is an alternative. Another nice little add-on is the Password Generator which they’ve included in the PC version of FlexWallet 2005.


There is another alternative to numeric and alphanumeric passwords:
Picture passwords are used in the password safe visKeeper.
This offers a much higher level of master password security.

[cof]

I use FlexWallet for about one year.
But I have finally decided to switch to another application (which one?).
FlexWallet has a nice UI and i was full satisfied with it, except one thing -the data is not enough secure. Two Peaks Software does not tell us which algorithm and how it uses.
Cryptographers says: if you do not know how your data is encrypted you can treat your data to be unsecure.
In prevous releases Two Peaks says: "strong 128-bit encryption ", now it says "Stronger and more robust 128-bit encryption algorithms." Bravo :)

Now I search for Wallet program for which:
- encryption algortithm is known;
- file format is published, so anyone can proof if the algorithm is used correctly.

Another discussion on Thoughts -Is Your Data Secure? (http://www.pocketpcthoughts.com/forums/viewtopic.php?t=13026)

Best Regards,
CoF

[benzf1]

does anyone use encyrption? i dont - unless i become a business man in an expensive suit. if anyone has a $300 pda, theyd guard it with their life. IT comes first, before the wife and kids. :devilboy:

[Dave Potter]

does anyone use encyrption? i dont - unless i become a business man in an expensive suit. if anyone has a $300 pda, theyd guard it with their life. IT comes first, before the wife and kids. :devilboy:

I hope she never divorces you - this quote could prove handy for her in court!

:lol:

[lmtuxinc]

dmcostello is correct. If you choose the numeric password option FlexWallet 2005 presents you with the number pad when you log into your wallet. However, the number pad seems smaller to me than in previous versions. Perhaps it's just my imagination. Does anyone else who has upgraded find the number pad smaller?

The number pad is smaller than before. I noticed that too.

What i really want is to be able to add my own icons to the cards.

[ctmagnus]

What i really want is to be able to add my own icons to the cards.

That's the one thing I dislike about the new version.