15-Minute Reviews :: Sticky Password v3.3.0.29

Hello everyone and welcome to another 15-Minute Review! Today’s review is on Sticky Password version 3.3.0.29 by Lamantine Software – A password management application with a wide range of features.

As a note; I’ve been using Sticky Password since it was last released as a giveaway on January 4th, 2007 (Before I started my reviews.) Since then I’ve reinstalled my system and got a copy of Sticky Password for myself; I’ve been on 3.3 for over a month now.

Software Description

As Giveaway of the Day states:

“Intelligent form filler and password manager that works with web forms and usual programs. Its exclusive user interface solutions allows to save time on accessing and managing passwords.

Innovative password protecting feature will prevent all attempts to steal your passwords.

It supports various authentication methods such as Bluetooth or USB and works from portable device with support of all features of desktop version.”

Quick Pros

• Integration for Internet Explorer and Firefox; Can be used on many other applications
• Use of Bluetooth or USB drives to secure database very handy
• Portable version very nice and mostly easy to set up
• Virtual keyboard very handy for portable use at a remote location
• Features intended to secure the entire process – Seems very strong
• Password generator can generate very strong passwords
• Auto sign-in is very handy for sites you have to log into every time frequently

Quick Cons

• Sometimes catches an incorrect username if it captures a password entered in a sign-in page
• Auto-fill sometimes an issue unless you configure better
• No option to automatically update portable unit when installed
• Sometimes has issues with AJAX logins (Just have to use the Sticky Password button to fill)
• Virtual keyboard should not ‘blink’ the keys clicking

Expansion

Password protection is a very serious topic these days. Everything is linked through a password nowadays; Bank accounts, payment services, online stock trading, forums and much much more. While everyone is supposed to maintain unique passwords for each, many don’t want to memorize dozens of passwords and where they go to. Password managers stepped up to this task, and Sticky Password is one of the many now on the field, trying to help you with your passwords, protecting your identity.

There are a lot of features in this application. For starters, there is direct integration for both Internet Explorer and Firefox, as well as Opera, Netscape, and many other non-browser applications such as MSN Messenger. The integration into IE and Firefox are both very subtle; You get a single button next to your minimize/maximize/close button. The defaults for how it works is pretty easy, but there will be times you will have to change them; For example, if I go to update my profile on a page, and it has a password field, it will auto-fill the information for me; This isn’t too bad, but quite frequently the first non-password field on a site is not the username, but first name or full name, or many other possible fields. Bit of a quirk and can be controlled via the preferences (Restrict where on the site to autofill – Might be good to set up for further security.) As well, when signing up at a site, the same sort of bug shows up; It picks the first filled input box on the site at the username; This is easier to correct when it pops up the dialog box to save the password; You just make sure the right site name (For your reference in the database) and username is in there.

A great feature of this application is the fact that instead of having to key in your password all the time or worse, leaving your database unlocked full-time, you can set up a Bluetooth device or a USB drive as the ‘key’ of the system. I use the USB drive as the key myself; However, if someone has, say, a PDA phone, cell phone or something that they will always have on them that is set up to auto-connect to your computer, this may be a great alternative due to the sheer ‘walk-up’ functionality you’d get. Get within range of your computer, and pop, it is open. With the key functionality, it is quite handy because I keep my Sticky Passwords Portable on one drive and use that same drive as the key for my main system; While the USB unlock functionality can not be used to unlock the Portable edition (A wise idea), you still need ti weigh if it is a good idea for you to do a similar setup. I find that as I leave my house, I pull the USB drive to lock Stocky Password and take my passwords with me; A handy idea.

As quickly mentioned above, another great feature of this application is the portable version, specifically designed for USB drive. It is easy to set up through the right-click menu of the System Tray icon. When you do use it, don’t forget your master password; It’ll be how you unlock it. The Virtual Keyboard can be a very powerful side to the Portable version as well; on a system which you do not know is secure, you can at least minimize the risk of losing your password(s) by using they virtual keyboard instead of the physical keyboard to skirt the risk of a keylogger.

This application also has many security features as well; If anything seems to be capturing other than itself and the application you’re inserting the password into, it will warn you and ask you if you want to allow or deny it. There is even a threat level indicator as well. While I haven’t dove into this very far, I have had quite a few warnings in my use; My remote application suite tends to freak it out quite a bit, and I’ve actually had it give me issues with applications like Launchy, which makes me feel more comfortable my passwords aren’t going to be compromised.

With this said, there are issues I do hope are corrected. I’ve touched on a few above, but here are a few more. I do wish there was an option to be able to automatically update your Portable database every time the USB drive with Portable on it shows up, and all while it is connected. I’ve had a few instances where I have forgotten to update my drive and been stuck trying to retrieve my password at a site or at work.

As well, I have found that Sticky Password does not like AJAX-based password forms for auto-filling. If it is a hidden pop-over window, JavaScript-spawned password login or otherwise, Sticky Password will not auto-fill it. Not to bad of an inconvenience usually; All you do then is click on the Sticky Password button on the titlebar of the window and click the account you want it to log into. If then it can’t find the boxes to input into, all you have to do then is just click on the username or password field, and it will go from there. It sounds more complex than it is, but still an extra step nonetheless.

One final note; For further security on a potentially insecure computer (or insecure location), I would rather have Virtual Keyboard NOT blink the buttons clicked. That way you have a better chance of thwarting a screen monitoring application, security camera nearby or otherwise. With this, at least you have a bit more chance to be secure.

Final Verdict

I have been using Sticky Password since January; I’ve tried a lot of other password applications to that point, and even since, and I haven’t found one that has flowed quite like Sticky Password. While it is not perfect, it is easy enough for me to use daily without feeling clumsy or awkward to use for day-to-day usage. The use of a USB drive as a key as well as the portable version sealed the deal for me. While free, anyone who has a lot of passwords to manage (I am personally sitting at 72 currently) and would rather keep your passwords strong and secure than one or few passwords for all sites, you should give this application a try. As for paying for it, $24.95 is a good price for your safety as well as increase in productivity.

Posted by BladedThoth on Friday, July 06, 2007