About KYPS
How it works
News
Mac spyware infiltrates popular download sites [Jun 1st, 2010]
Hacker sells 1.5m stolen Facebook username/passwords [Apr 25th, 2010]
Qakbot Steals 2GB of Confidential Data per Week [Apr 22nd, 2010]
Botnet used to steal credentials of over 800K users [Mar 3rd, 2010]
Stealing passwords advertised as major feature of new crimeware toolkit [Feb 10th, 2010]
German cops bust cybercrime forum [Mar 4rd, 2009]
Firefox plug-in Trojan harvests logins [Dec 8th, 2008]
Keep Your Password Secret
safely login despite keyloggers and spyware
the problem
When you use a computer that is not under your full control, such as a computer in an Internet café, a public library, or at a friend's or relative's house, it is often impossible to tell whether or not some form of spyware (including keyboard logging software or hardware) is running in the background. (Indeed, in some places you can even expect that it is!) Even if the owner or operator of the computer is absolutely honest, in many cases it is still possible that someone else has installed the spyware without the owner's knowledge or consent, even without ever being physically present at the site! The spyware could then pick up your passwords when entered into the computer and disclose them to whoever controls the spyware - and this works, of course, also remotely.
the solution
Our service, called KYPS, enables you to log into your accounts from a public/shared computer, without disclosing your password to that computer. KYPS is very easy to use and does not require you to run any software on the public/shared computer - all you have to do is to obtain a list of one-time codes from the KYPS server, print these codes, and keep the printout safely in your wallet (alternatively you could save your codes on your mobile phone or PDA). You can then log into your account using your one-time codes instead of your password. In addition to this, you use the KYPS SMS service. With this, you can instruct KYPS to send you a one-time code to your mobile phone at the time you want to login from somewhere - there is no need to carry around lists of codes.