PAGE 1 | Kaspersky Password Manager | 17 May 2011

Kaspersky Password

Manager

Kaspersky Password Manager stores your passwords securely and fully automates the process of entering data into web pages.

Kaspersky Password Manager is an indispensable tool for the active Internet user. It fully automates the process of entering passwords and other data into websites and saves the user going to the trouble of creating and remembering multiple passwords.

When you use Kaspersky Password Manager to log in, you can rest assured that your data is safe. The software creates exceptionally strong passwords and prevents your login information from being stolen. All confidential data is encrypted and kept in a dedicated database on your computer.

Contents Introduction .................................................................................................................................... 2

Other password facts ................................................................................................................. 2

Principal advantages ...................................................................................................................... 3

Global features ................................................................... Fout! Bladwijzer niet gedefinieerd.

New features .............................................................................................................................. 4

Kaspersky Password Manager Product Tour ................................................................................. 5

System requirements ................................................................................................................. 5

Installation and Setup ................................................................................................................. 5

Overview of the user interface .................................................................................................... 7

Contacting Kaspersky ............................................................ Fout! Bladwijzer niet gedefinieerd.

PAGE 2 | Kaspersky Password Manager | 17 May 2011

Introduction

Every day an active Internet user logs on to numerous

online services that require authentication and has to

enter personal identification data to access an email,

bank, online store, social network or other account.

The main authentication method used by web

resources is based on entering the user name and

password.

For password protection to be reliable, the following

conditions must be met:

strong passwords must be used

different passwords must be used for different

resources

passwords must be stored where cybercriminals

will not be able to access them.

If the number of online services used is sufficiently large, creating and memorizing unique strong passwords for each

account is a challenging task.

"Two-thirds of U.S. consumers surveyed use the same one or two passwords for all websites they access that

require authentication," said Gregg Kreizman, research director at Gartner

(http://www.gartner.com/it/page.jsp?id=895012). About a third of all users use their browser’s password-saving

feature. This means that their passwords are stored in unprotected locations that can be accessed by

cybercriminals. More than half of all users choose meaningful words as passwords, making it easier for criminals to

guess them.

Kaspersky Password Manager addresses the issues related to managing your passwords. The program reliably

protects your identification data and automates their entry on web pages. Kaspersky Password Manager makes your

online experience more enjoyable and secure, as well as saving your time.

Other password facts Statistics taken from a password study commissioned by Internet security firm Webroot (October, 2010)

http://pr.webroot.com/threat-research/cons/protect-your-computer-from-hackers-101210.html

• 4 in 10 respondents shared passwords with at least one person in the past year.

• 41 percent use the same password for multiple accounts.

• Almost half of all users never use special characters (e.g. ! ? & #) in their passwords

• 2 in 10 have used a significant date, such as a birth date, or a pet's name as a password

• Only 16 percent create passwords with more than 10 characters in length.

• Three quarters (77 percent) of consumers have five or more accounts with online services that require

passwords.

• One-third (35 percent) have 10 or more password-protected accounts. Only 10 percent ensure they never

use the same password on different accounts.

• Passwords are forgotten occasionally, often or always by over half of consumers (51 percent).

• 86 percent do not check for a secure connection when accessing sensitive information when using unfamiliar

computers.

• 14 percent never change their banking password.

• 30 percent remember their passwords by writing them down and hiding them somewhere like a desk drawer.

• Almost half of Facebook users (47 percent) use their Facebook password on other accounts and 62 percent

of Facebook users never change their password.

More than 90% of the 100 most visited destinations on the web and more than 80% of the top 1000 websites collect

passwords from their users. (The Password Game: negative externalities from weak password practices, Sören

Preibusch and Joseph Bonneau, University of Cambridge.)

Average time users maintain the same password: 31 months. (Password Security: What Users Know and

What They Actually Do, Shannon Riley)

Principal advantages

Reliable protection of your passwords

Kaspersky Password Manager stores your passwords and other personal data in a dedicated encrypted

database on your computer. The passwords stored in the database can be decrypted only with the master

password or another authentication method selected by you in advance, ensuring the security of your passwords

and preventing cybercriminals from stealing them.

One-click authentication Kaspersky Password Manager remembers the parameters (login and password) you use to access web

resources. The next time you visit the site, the program will automatically fill in your identification data.

Kaspersky Password Manager also supports applications which require authentication.

Creating strong passwords The security of your data is directly dependent on the strength of the passwords you use. It is quite common for

users to have the same or similar passwords for different accounts. As a result, it is sufficient for a cybercriminal

to obtain one password to get access to all of your accounts. The password generator built into Kaspersky

Password Manager will help you create strong passwords that will be hard for cybercriminals to break.

Portable version The portable version of the program allows you to use the password database on any computer without having

to install Kaspersky Password Manager. The portable version can be launched from a variety of removable

digital media, such as USB drives.

Automatic filling of long forms Registering on a website often involves entering personal data in addition to the user name and password, such

as the user’s full name, year of birth, gender, email address, telephone number, country of residence etc.

Kaspersky Password Manager fills out long registration forms based on identity cards with personal data created

by the user in advance. To keep business data apart from personal data, the user can have several identity

cards.

Effective protection against keyloggers and phishing attacks. As passwords are entered without using the keyboard, Kaspersky Password Manager provides you with highly

effective protection against keyloggers. Moreover, it effectively counters phishing attacks by ensuring that a URL

is authentic before logging you into the website.

What’s new?

Secure memos NEW

The new version of Kaspersky Password Manager enables you not only to securely store logins and passwords

but also personal records which you would like to remain confidential such as: SIM card PIN codes, software

keys, passport details, etc. It is possible to use templates with standard data types when creating a secure

memo.

Secure exchange of account details NEW

Sometimes we need to share our login and password to a certain resource with family and friends. To avoid

sending your confidential information openly, take advantage of the new option included in Kaspersky Password

Manager that allows the exchange of encrypted login information. After a predetermined period of time, the

product will remind you that the account information has been shared with another user and you will be able to

modify the access parameters to ensure security.

One account for several websites or applications NEW

Sometimes it is necessary to use one account for several web resources or applications, e.g. when a vendor

requires the use of a single login and password for all services. Kaspersky Password Manager identifies the

correct login and password to use with multiple accounts. If you change your login and password information, all

of the related accounts will be modified automatically.

Unification of password databases NEW

Using Kaspersky Password Manager on different computers, for example, the home computer and the office

PC, you may face a situation whereby the password databases differ. Kaspersky Password Manager enables

several databases to be united into just one.

One identity – several bank cards NEW

Quite often you use several bank cards to make an online transaction. Kaspersky Password Manager saves all

your bank card information in one identity and inserts it when completing forms. The product also allows a

specific card to be selected as the default card or the required card to be chosen from a list.

Kaspersky Password Manager Product Tour

System requirements

Software requirements

* Kaspersky Password Manager supports only 32-bit applications and browsers.

Hardware requirements 512 MB RAM (recommended)

10 MB free space on the hard or flash drive

computer mouse

Installation and Setup

Installing and configuring the application Product Installation is easy as the installer provides step-by step instructions. You must

accept the licensing agreement during the process of installation; otherwise, the

application will not be installed.

Kaspersky Password Manager Configuration Wizard When launching the program for the first time, you will be prompted to use the Kaspersky Password Manager

Configuration Wizard. Follow the wizard’s instructions to create a master password, set the program’s access

parameters and configure protection of your data.

Creating the Master Password

Using data that can be easily guessed (such as names or birthdates) for the master password is not recommended.

To create a strong password, use combinations of lower and upper case letters and digits.

Operating systems

Microsoft Windows XP Home Edition

Microsoft Windows XP Professional (x86/x64)

Microsoft Windows Vista Home Basic / Premium (x86/x64)

Microsoft Windows Vista Business / Enterprise (x86/x64)

Microsoft Windows Vista Ultimate (x86/x64)

Microsoft Windows 7 Home Premium (x86/x64)

Microsoft Windows 7 Professional / Ultimate (x86/x64)

Supported browsers*

Microsoft Internet Explorer 6.0-9.0

Mozilla Firefox 2.x,3.x,4.x

Google Chrome 6.0

Maxthon 2.5.x

Flock 2.х

Seamonkey 2.0.8

Administrator privileges are required to install the

application.

The master password provides access to all of your data. Should you lose the master password, you will not be able to access your

password database! Use a password that is easy to memorize but hard to break.

Managing password database access

This step of the wizard allows you to select the method of accessing the password database that is most convenient

for you. You have a variety of ways to unlock the password database:

By using a password – information from the password database is accessible only after entering the master password;

By using a USB stick – the password database can be accessed if the device is connected to the computer;

By using a Bluetooth device (your phone, for example) – the password database can be accessed if a

connection has been established between the computer and the Bluetooth device selected;

Or it can be set as Always Unlocked.

Blocking the password database

Kaspersky Password Manager can be configured to automatically block the password database when the computer

is not in use. At this step of the wizard, you can specify the period of inactivity after which the password database will

be automatically blocked.

Completing the wizard

The wizard’s last window informs you that the program setup is now complete. In the final step before you start using

Kaspersky Password Manager, you will be prompted to activate the program.

If you selected password protection to manage access to password databases, use the virtual keyboard to enter the master password. The virtual keyboard provides secure data entry, protecting the computer from malicious programs

that intercept data by making screenshots or recording sequences of key strokes.

Kaspersky Password Manager is fully functional for a period of 30 days after installation. Upon completion of this trial

period, some of the features of the trial version are disabled.

Activating a commercial license You can activate a commercial license in the last window of the application’s setup wizard or later, from the Help

Enter license key option of the context menu that can be brought up by right-clicking the Kaspersky Password

Manager icon in the system tray.

Overview of the user interface The product’s interface gives the user access to all the features of Kaspersky Password Manager that are necessary

for authentication on websites and in applications.

Caption button The Kaspersky Password Manager caption button allows you to work with your personal data directly from the

applications that require authentication or from web browsers. Compatible applications have the button in the top

right-hand corner of their windows.

The caption button is active if Kaspersky Password Manager’s password database is not blocked.

System tray icon As soon as Kaspersky Password Manager is launched, the program’s icon appears in the Windows system tray.

Depending on the situation, the Kaspersky Password Manager icon will have the following appearance:

active (green) – the Kaspersky Password Manager password database is unblocked, with access to personal

data allowed;

inactive (red) – the Kaspersky Password Manager password database is blocked, with personal data

unavailable.

Browser integration is provided via extensions (plugins). By default, extensions are installed automatically when Kaspersky Password Manager is first launched. You can additionally install a required plugin by selecting Settings Supported

browsers in Kaspersky Password Manager’s context menu.

Right-clicking the Kaspersky Password Manager icon opens the program’s context menu.

Creating an account Kaspersky Password Manager provides several convenient methods for adding an account to the password

database. The easiest method is for an account to be added automatically directly from the web page or application.

Adding an account from a web page or application

When asked for a password, you can either fill in the login and password fields and let My Password Manager

automatically add this pair to the password database, or you can use the hot-key combination Ctrl+Alt+A to bring

up Add New Account and select Advanced Add. This feature enables you to teach My Password Manager to fill in

passwords in ‘tricky’ forms that are otherwise inaccessible.

If you use several user names for a web resource or application, Kaspersky Password Manager will prompt you to

add a new user name to an existing account.

Importing from other databases

The program supports the addition of passwords from other password management applications, from the

unprotected (unencrypted) password databases of Internet Explorer and Mozilla Firefox browsers as well as

passwords that you have already exported from Kaspersky Password Manager. To import passwords, select Password

Manager in Kaspersky Password Manager’s context menu and press Import in the Backup tab of the window that

opens.

Adding an account from the Kaspersky Password Manager menu An account can also be added from the context menu of Kaspersky Password Manager or using the caption button

by selecting Add account in the caption button’s menu.

Automatic authentication Kaspersky Password Manager links accounts stored in the password database

with the applications and web pages for which they are used. Once you’ve

added an account, the next time you visit a website or run an application,

Kaspersky Password Manager will automatically fill in the login information for

you.

For applications that have a graphical interface, the role of a control is determined based on its window class, name and location. Accounts are linked to applications based on the executable file’s name and path, as well as the window to which the account was linked.

Password database All the stored accounts are viewable and editable in the My Password Manager main window (right click on the

program icon in the system tray and choose My Password Manager from the context menu).

The automatic form filling feature is unavailable for those web

resources which have controls based on flash technology.

Kaspersky Password Manager supports 32-bit

applications only.

Exporting passwords Kaspersky Password Manager is able to export your passwords, identities and secure memos. Sometimes we need

to share our login and password to a certain resource with family and friends. To avoid sending your confidential

information openly, take advantage of the new option included in Kaspersky Password Manager that allows the

exchange of encrypted login information. After a predetermined period of time, the product will remind you that the

account information has been shared with another user and you will be able to modify the access parameters to

ensure security.

Database backup and restore Kaspersky Password Manager automatically creates a backup copy of the password database on your computer

every time it is modified. You can easily restore your registration information if the current database has been

damaged or if you would like to cancel the latest changes.

The backup feature allows users to restore old versions of the password database. Restoring passwords may be

necessary if:

the most recent changes need to be cancelled;

the Password Database was overwritten or deleted;

the current Password Database is inaccessible / damaged after a hardware or system failure.

Portable version Kaspersky Password Manager allows you to keep all your passwords on removable media (e.g. on a flash drive or

mobile phone if its built-in memory is used as a flash drive). This means that you can use Kaspersky Password

Manager on any public computer (e.g. in an Internet café or a library) without installing the application on that

computer. As soon as the removable device is connected to a public computer, Kaspersky Password Manager will

launch automatically. Your personal data will remain reliably protected, since the portable version does not save

data on the computer. As soon as the removable device is disconnected, Kaspersky Password Manager will

automatically close without leaving any of your data on the public computer.

To create a portable version of Kaspersky Password Manager, select the Portable version option in the program’s

context menu and use the dedicated wizard.

Generating strong passwords To ensure the security of your data, Kaspersky Password Manager allows you to create strong account passwords

using the built-in password generator. You can define various parameters that affect the strength of a password,

including its length (from 4 to 99 characters), the presence of lower-case and upper-case letters, and the use of

special symbols.

The password generator is available when creating a new account on a website or via the Kaspersky Password

Manager context menu.

To create a portable version, a USB flash drive is required with a minimum of 8 MB free space. The total amount of space required for storing your personal data

depends on the size of the backup copy of the password database.

Filling out long web forms Registering on web pages often requires filling in personal data, such as the user’s full name, year of birth, gender,

email address, telephone number, country of residence etc., in addition to the user name and password. Kaspersky

Password Manager stores all this data in the encrypted password database as identities. When registering on a new

website, Kaspersky Password Manager automatically fills out the registration form with data for the selected identity.

To separate business and private information, the user can have several different identities.