Security

• Scalability of password strength on the fly by simply modifying the screen challenge complexity without needing to reissue a user key. Authentications can easily change from 3 up to 8 digits depending on the security requirement. Unlike other fixed electronic authentication methods, this leaves a potential attacker with no clear target point.
• More secure than many electronic tokens, PassWindow is able to passively embed specific transaction types and values into challenge images alerting users to a man-in-the-middle attack. This same passive method allows secret numbers or codes to be securely transmitted to the user.
• The user's thin card is easily kept safely within a regular wallet or purse along with their regular identification cards – a far more difficult target for casual interception than if it were loose in a drawer or dangling on a keychain in public view.
• Flexible dynamic passwords, secure against keylogger, dictionary, and over-the-shoulder attacks
• Highly resistant to social engineering attacks – the visual aspect to the key pattern makes it difficult or impossible for users to compromise the key pattern to an attacker online or over a telephone in comparison to token PINs, printed or memorized passwords.
• Limited viewable angle of the code protects against third party visual observation.
• Eliminate dangerous USB ports from your secure business environment, USB ports are increasingly used as a network attack vector as well as enabling information theft.
• A tinted or transreflective optical coating over the pattern obscures discrete third-party photography of the key pattern.
• Unlike SMS-based authentication, your codes are delivered securely to your client, not over unreliable third party telecommunications networks
• Phishing deterrent: Regain email communication with your customers by including a PassWindow pattern image that will authenticate the email message specifically for that customer. Phishing attackers are unable to generate these legitimate challenge patterns.

Ease of implementation

• Simple to integrate with any online membership system
• Easily works alongside existing ID card technologies, such as RFID, smartcards, and magnetic strips.
• Service providers can easily manufacture their own highly secure user authentication tokens in house. Ordinary printing technology enables providers the ability to keep the entire supply chain within their own security network without relying on 3rd party manufacturers.
• Incredibly flexible security and usability – there are a myriad of possible implementation styles to suite your security needs.

Affordabiltiy

• Extremely cheap dynamic password system – standard PVC ID cards with transparent sections can cost less than a few cents per user.
• Cheap and simple to deploy or replace remote user keys in person or delivered by standard postal envelope for a fraction of the cost of delivering a bulky device package. Unlike the case with OTP hardware tokens or biometrics, it is cheap and simple to replace the user's lost or compromised key.
• No expensive dedicated electronic hardware tokens required and protection against the myriad of associated electronic vulnerabilities