2013 - Can NFC Make Passwords Past Tense?

Can NFC Make Passwords Past Tense?

14 February 2013

As passwords for even the most basic services become increasingly complex, could NFC technology change the way we access our data and accounts?

That’s what London-based startup Hoverkey is betting on, as it uses contactless technology in a way that could make enterprise apps and data much more secure.

The logic behind the process is simple: you touch an NFC-equipped card to an NFC-equipped mobile device running the Hoverkey app, and the system enters complex passwords and authentications for you automatically. In the words of NFC World, it means that “IT departments can mandate strong passwords to protect enterprise apps and data without meeting the usual user resistance.”

The app and card combo can also be used as a password store for third party mobile apps, which can be integrated through the Hoverkey Button user interface widget. Hoverkey says integrate with its services is simple, and offers developer kits containing two Hoverkey cards and an SDK for $99.

"Most apps can support it within a few hours, making it a breeze for companies to really differentiate themselves in a crowded marketplace" said Hoverkey's Martin Alderson.

The system currently only works with NFC-enabled Android devices, but support for Windows Phone 8 is planned as well. Hoverkey will support iOS devices “as soon as apple integrates NFC hardware into their devices,” the company said.

Does using an NFC card to access apps on your smartphone seem practical to you? Would you be willing to use a system like this to protect sensitive data? Let us know in the comments below!

And for more information on Hoverkey, read the original NFC World piece here.

Want more news and commentary delivered right to your inbox? Sign up for our daily newsletter now!

Please send all press releases and story ideas to Ben Carsley at bcarsley@pymnts.com.

Comments

John Brooker:

A stolen card and phone would then give total access to the thief, would it not?

AY:

A fair question, John. Stealing both card and phone woudn't give the thief total access, if the app is protected by a card PIN. In this mode the card only releases your password if the PIN is correct. (The user/thief has three attempts on the PIN before the card gets blocked.) Comparing to the traditional RSA SecurID token, which always shows the passcode for example, this is far more secure as well as user friendly.

If the app password wasn't protected by the card PIN, then the thief (assuming he bypasses any screenlock) would be able to access your app, but not all card functions most of them (e.g. registering a new password) require a PIN.

Of course the user is strongly advised to keep their phone and card separately so that they won't get lost or stolen together. You might, for example, keep the card
in your shirt pocket and your phone in your jacket pocket.

You are very welcome get in touch with Hoverkey via our contact page if you need any further information.

Guest:

A fair question, John. It woudn't give the thief total access if the
app is protected by a card PIN. Then the card only releases your
password if the PIN is correct. (The user/thief has three attempts on
the PIN before the card gets blocked.) Comparing to the traditional RSA
SecurID token, which always shows the passcode for example, this is far
more secure as well as user friendly.

If the app password wasn't
protected by the card PIN, then yes the thief (assuming he bypasses the
screenlock) would be able to use your app.

Of course the user is
strongly advised to keep their phone and card separately so that they
won't get lost or stolen together. You might, for example, keep the card
in your shirt pocket and your phone in your jacket pocket.

You are very welcome get in touch with Hoverkey via our contact page if you need any further information.