Nice Idea, but not a finished product
For Mooltipass Mini Offline Password Keeper
The idea of a hardware password manager with id cards is very good, and this is a good attempt at a product.
However, it cannot deliver what it promises. At this time, it is a hardware dongle to be used with an installed application, which is not available for mobile devices.
Generally, I'd have liked to use the auto-type feature on my android devices as well as my PC with Qubes OS. Unfortunately, that feature is not really usable. It works only with basic ASCII characters, which is too big a limitation for secure passwords. None of my existing passwords are limited to simple ASCII, and weakening my passwords is not what I had in mind when I got this device. Extended ASCII would probably be enough to support all my current passwords, but this device is not capable of that. Also, it does not seem that the developer is still working on the device or firmware, my questions about improvements were deflected with hints to the "next device". Which would mean this is a mediocre device without support and no future updates.
My own attempts to extend the ASCII functions to extended ASCII were hindered by the total lack of documentation. The developer does answer some questions, but ultimately I was unable to figure out how to generate new keyboard layouts, and got no answer.
The best I can say about this project is that it is the best attempt at a trustworthy hardware password manager I have seen. But it is not good enough.
Response from Stephan Electronics | March 30, 2019
Hello Benjamin,
We're very sorry you feel this way.
Rest assured that the ASCII charset space (more than 100 chars) allows you to have a grand total of 1x10e62 (1 with 62 zeros after!) combinations, which allows you to store nearly impossible to crack passwords. We're indeed working on lifting the ASCII limitation on an upcoming device.
We're not sure why you felt like we were not answering your questions, especially if you were trying to contribute to our source code. You may find us 24/7 on our IRC channel (#mooltipass on freenode). All of our source code is thoroughly documented.
Again, we feel extremely sorry that you feel this way. If you feel like this device doesn't deliver on its promises, we'll gladly offer you a full refund. Simply get in touch with us.
