PDA

View Full Version : eWallet vs CodeWallet Pro


LinuxGeek
28th August 2006, 08:08 PM
Thinking of getting one of these, any one here have experience of these two apps and any recommendations ?

Thanks.

mobiler
28th August 2006, 09:09 PM
Hello,

Actually I have pretty much experience with CodeWallet, eWallet and FlexWallet. I've been using eWallet for many years and recently switched to CodeWallet. There is a serious security issue with eWallet. It appears the Category names are in plain text unencrypted format !! Altought the actual cards are encrypted, I wouldn't be so happy for a thief to be able to see what I am hiding inside (i.e. Bank Accounts etc..) Sometimes the category name itself is something you would want to protect. That's why I switched over to CodeWallet even though CodeWallet provides only 128 bit encrptiong while eWallet provides 256 bit, though again with no category encryption.


MOBILER

LinuxGeek
28th August 2006, 09:16 PM
Thanks for pointing that out.

I agree with you , eWallet is now off my list.

The other option I am looking at is instead getting Sentry 2020 which creates an encrypted mount. Then just have my sensitive info in Excel spreadsheets on that mount encrypted. Perhaps the encrypted mount can be my external storage card.

http://www.softwinter.com/sentry_ce.html

http://www.geek.com/hwswrev/wince/sentry/index.htm

Any opinions on this ?

Gut feeling , CodeWallet seems best all rounder so far.

mobiler
29th August 2006, 02:13 AM
hey linuxgeek

from my own personal experience, I've used many encryption programs and found all to have flaws except for this one: CryptoStroage which I eventually purchased.

It's key benefits is unlimited size - most other programs have limits of a few Mbs. with this program I can mount a few houndred MB volume on my SD Card where I put all my scanned documents in and view them with acrobat reader.

Another key benefit it has a desktop version so you could use the same volume to mount on your desktop pc. very neat, instead of going to the ppc each time. It is the most fast I've tested and is super easy to use. It looks like another SD card storage.

I think I've tested Sentry 2020 and found it was inconvenient for me.. but i'm not sure.. I may have not tested the recent version so I don't know. but I see Sentry costs $50 and Cryptostorage costs $20.

Let me know if there's something else i can help you with.

LinuxGeek
29th August 2006, 02:25 AM
Great tip thanks for that.

Cryptostorage looks fab , definately going to get it.

Do you think its worth getting CodeWallet also or shall I just get Cryptostorage and like metioned earlier keep all my info in excel/word files inside the safe ?

Thanks for all your input.

LinuxGeek
29th August 2006, 12:35 PM
Looking at Cryptostorage website it doesn't mention it works with Windows Mobile 5 .

Are you or any one using on a Universal with WM5 ?

mobiler
29th August 2006, 04:10 PM
Looking at Cryptostorage website it doesn't mention it works with Windows Mobile 5 .

Are you or any one using on a Universal with WM5 ?

Hey,

Yes it works on my Universal just fine. I found it to be the most convenient program among the encryption programs.

I do suggest getting Codewallet as well. It is not convenient to mount a volume each time, then fire up excel if only to check for a password. I personally have all my passwords, maybe a hundred stored with Codewallet and I also enjoy the Desktop version, which is easier to use when working on the desktop PC. I use my wallet file on the Synced My Document folder and then the desktop version and the PDA version are synced with the latest wallet file each time.

LinuxGeek
29th August 2006, 04:27 PM
Thanks for reply.

I am moving towards getting eWallet and using cryptic category names because of its 256bit encryption.

I am definately going to get Cryptostorage too now that u confirm it is fine under Universal.

Thanks for all your input mate.

frigit
30th August 2006, 02:21 AM
Anyone used cryptocard? I've been thinking of changing from myCodes Lite to this. myCodes seems OK but is a little slow.

mbirth
10th December 2006, 10:46 AM
Anyone ever wondered, how comes that CodeWallet can sync your Desktop/Mobile wallet without any password entered?

I guess they encrypt the data by record and keep a timestamp unencrypted. But this way if you often use the same login name and have many similar forms (Username, Login, URL), an attacker could get the password somehow, I think, since there is always the same beginning of the records.

It's something like security vs. sync-without-password-prompt. Where as 128bit RC4 isn't "strong" encryption nowadays anyways. I'm a bit concerned about the *real* security of this app...

Cheers,
-mARKUS

mbirth
15th February 2007, 11:25 AM
CodeWallet now is a NO GO for me. Found some patched EXE-file of its Desktop-version, where you can enter *any* 3-digit password to open your file. This is not security, this is INsecurity par excellence.

Cheers,
-mARKUS

UPDATE:
- Windows Mobile Security Software fails the test (http://www.informit.com/articles/article.asp?p=607375&seqNum=4&rl=1) (info about header-copy to open files)
- mininova (http://209.85.129.104/search?q=cache:ipJ9Ar2SmpgJ:www.mininova.org/com/537388+codewallet+password+any&hl=en&ct=clnk&cd=46) (first mention of this security flaw)
- PxDxA (http://209.85.135.104/search?q=cache:TpqZ3clcNI4J:www.pxdxa.com/simple/index.php%3Ft27250.html+codewallet+ifalleni&hl=en&ct=clnk&cd=6) (detailed infos about this flaw)