What is it?

This is a USB device that manages credentials for up to 250 accounts. Credentials (account names, usernames, passwords and URLs) are stored ONLY on the device itself, on two removable EEprom chips using military grade encryption (AES-256). They are not stored in the cloud or in a file on your computer where they are more exposed to hackers. Credentials are backed up on the device itself; i.e. encrypted credentials are moved from the primary EEprom chip to the backup EEprom on demand. You may remove the EEprom chips from the device (perhaps to keep a third or fourth backup). Credentials are entered either via the rotary encoder (on the left) or via the PasswordPump GUI, which you can download and install. The device itself is approximately 1 1/8 x 2 3/4 inches, or 28 x 76 millimeters. Currently it's not housed inside of a case. A preliminary case design will be made available when complete.

Features

• Store up to 250 sets of credentials
• Authenticate with a 15 character master password
• Search for accounts
• Data entry via rotary encoder or keyboard and serial monitor, or via client Python GUI running in Windows, Ubuntu, or MacOS.
• Send username and password as if typed in via keyboard. Can also send URL, old password and account name.
• Add account name, username, password (generated or not), URL, old password
• Accounts added in alphabetical order
• Edit existing username, password, URL, style (inter-username/password character, Return or Tab), old password
• Automatically saves old password if it’s not already populated
• Delete account
• Generate 31 character random password from the PasswordPump or via the client GUI.
• Backup all accounts to a second encrypted external EEprom
• Logout / de-authenticate via menu, automatically locks computer
• Factory reset via menu (when authenticated) wipes out all credentials
• Configurable password display on or off
• Configurable failed login count factory reset (3, 5, 10 or 25)
• Configurable automatic logout after count of minutes (30, 60, 90, 120, 240, 1 or Never)
• Configurable RGB LED intensity (high, medium, low or off)
• All passwords (except master password) are encrypted w/ AES-256; master password is hashed w/ SHA-256.
• All encrypted accounts and the hashed master password are salted
• Change master password
• Export to PasswordPump formatted CSV file
• Import from PasswordPump formatted CSV file
• Import credentials from Chrome export
• Import credentials from KeePass export
• Associate credentials with groups for better organization; search by group (Favorites, Work, Personal, Home, School, Financial, Mail or Custom)
• Decoy password feature that automatically factory resets the device if entered (e.g. while the user is under duress)
• Pre-auto-logout indicator/countdown via red and blue flashing RGB LED.

IMPORTANT

Please read Read Before Purchasing, in the PasswordPump v2.0 Users Guide, located here

Why did you make it?

This device was designed and developed to address my need for a single place, outside of the cloud, where I can securely store different passwords for each of my multiple sets of credentials; a device that's relatively hacker-proof when an attacker does not have physical access to the device, with which I can quickly and easily locate and supply my credentials for any computer, application or web site.

What makes it special?

This device is special because it provides you with a way to securely and easily store many sets of credentials, and it's unique in the market at this price point.