General
What is the problem with online security?
Why do I need SafeTok?
What is SafeTok?
How to start using SafeTok?
What is SafeTok Express?
What is SafeTok Biometric?
What’s the difference between the two anyway?
Trying out SafeTok right now
Can I try SafeTok right now?
Do you have any videos showing SafeTok in use?
Can I see some Screenshots?
If I like what I see, can I integrate it right now?
Security
Why is SafeTok the most secure?
What attacks does SafeTok prevent?
What about fake fingerprints?
Is my fingerprint safe?
What about fake fingerprints?
What is fingerprint privacy and why should I care?
Web Admins
How is SafeTok different from other security systems?
Will our users have to change their surfing habits?
How will the user experience change?
Is SafeTok compatible with all browsers?
How will SafeTok affect the current site security?
Integration
General
Do I need to install new software on the server?
How long does it take to integrate?
Do I have to decide which version to offer to my users?
How can I get started?
Special Offer
Using SafeTok
Enabling SafeTok protection
How can I start using SafeTok?
I disabled SafeTok protection by clicking "don't remind me again". Can I still enable SafeTok?
Software Installation
Do I have to install software to run SafeTok?
Can I use SafeTok if I can’t install the SafeTok software?
How to install the SafeTok software?
My Windows/Firewall/Anti-Virus/.. gives me a warning when installing the SafeTok software - what should I do?
Enabling SafeTok Device Protection
What devices can I use?
Can I use the same device to protect several websites?
How do I register a device?
Enabling SafeTok Fingerprint Protection
What devices can I use for biometric protection?
How do I enable fingerprint protection?
How many fingerprints can I register?
Back-up devices
What is a back up device?
Why would I create one?
How do I create a back-up device?
If I copy the data stored on my device - will I be able to use the device I copied it on as a back up?
Log-in
How do I log-in with SafeTok protection activated?
I have my SafeTok device already connected, do I need to do anything else?
Loosing & blocking devices
What if I loose my device?
Can I block a device?
Can I delete a device?
Frequently Asked Questions and Answers
General
What is the problem with online security? Why do I need SafeTok?
The internet has become a dangerous place – everyone is at risk of getting their account hacked, potentially resulting in stolen money, lost time and friends. Even if your account is protected with sophisticated protections such as one time password tokens and card reader devices, you are still at risk because even the most sophisticated protections are all vulnerable to a range of online attacks (e.g. Man-In-The-Middle, Man-In-The-Browser,..). SafeTok has been developed as a response to those attacks. Currently SafeTok is the only solution which can effectively protect your account. Therefore, in order to secure your account you should use SafeTok.
What is SafeTok?
SafeTok is the most secure way to protect website users. It is the first and only three-factor online authentication system on the web. In other words, it allows you to protect your account with a device and your fingerprint. Actually, you can turn an ordinary electronic device (for example, a USB Stick) into your key to the web. If you use a biometric USB stick you can additionally protect your account with your fingerprints. Behind the scene, cutting-edge security technologies prevent all online attacks. SafeTok is very convenient and easy to use for both website administrators and end users.
How to start using SafeTok?
If you are an end user:
- If your favourite website supports SafeTok protection you will be asked about setting it up the next time you log-in.
- If your favourite website does not use SafeTok yet, ask your webadmin to integrate it.
If you are a website administrator
- Step 1: Sign up
- Step 2: Watch our integration video
- Step 3: Integrate it (takes roughly 10 minutes)
What is SafeTok Express?
SafeTok Express is the two factor protection option where your account is protected only with the device of your choice. One of the many advantages is that you can set it up immediately with your favourite gadget (USB Sticks, Memory Cards, MP3 Players, Mobile Phone, etc.). You can find out more about SafeTok Express and how it is different from SafeTok Biometric in our find out section.
What is SafeTok Biometric?
SafeTok Biometric is the three factor SafeTok protection with device and biometrics. Your account is not only protected with your SafeTok device but also with your fingerprint. It is more secure than SafeTok Express, because even if both password and user's device are stolen, the account is still protected. The important difference is that it requires a USB Stick with an integrated fingerprint reader, like a SafeTok Biometric USB Stick. You can find out more about the two options and which one is more suitable for you in our find out section.
What’s the difference between the two anyway?
SafeTok Express offers immediate security with your favourite device whilst SafeTok Biometric offers truly unbeatable security but requires a biometric USB stick. SafeTok Express if often offered to users of social networks with an option to upgrade to SafeTok Biometric by registering a biometric device. SafeTok Biometric is usually set-up and enforced by high security pages such as banks, which issue SafeTok Biometric USB Sticks to all users. Find out more about the difference
Trying out SafeTok right now
Can I try SafeTok right now?
Yes, you can! You can try out all SafeTok features on our demo webpage. You don’t require any knowledge about SafeTok to try it out because you will be guided through the page by our guidance wizard.
Do you have any videos showing SafeTok in use?
Sure. We have produced a range of videos showing the different aspects of SafeTok, showing SafeTok in use (logging in with SafeTok, registering a SafeTok device,..), as well as integration guidance videos. You can watch them all in our video section.
Are there any Screenshots?
To see screenshots showing SafeTok in use, just visit our screenshots page in the find out section.
If I like what I see, can I integrate it right now?
Of course you can. Register your SafeTok webmaster account, watch our integration guidance videos and then integrate it!
Security
Why is SafeTok the most secure?
SafeTok has been developed as a response to previously unbeatable attacks such as Man-In-The-Middle, in order to secure the web once again. It features many innovative security technologies, which guard users from all known cyber attacks: from notorious Phishing to device theft and copying. It is also the first online system to protect users with all three factors including the user’s fingerprint. On top of that, it features unique fingerprint privacy which does not only increase the system security but also gives users peace of mind that no one but them has access to their fingerprints. For more details on SafeTok security, visit our security page.
What attacks does SafeTok prevent?
SafeTok prevents pretty much all known attacks:
- Phishing, Vishing, Pharming, etc.
- Man-In-The-Middle (MITM)
- Man-In-The-Browser (MITB)
- Viruses, Trojans, Malware, etc.
- Device copying
- Key-loggers, Screen Capture, etc.
- Data Interception & Replay attacks
- DNS spoofing
- Routing table injection
- Device theft
- Coercion
- ... you name it ..
How does SafeTok fingerprint verification differ from traditional fingerprint checks?
Theoretically biometrics make it impossible for anyone but the true owner to get access to the account. However, traditional fingerprint systems work by scanning the user’s fingerprint and sending it to the central authentication server, where the fingerprint image is actually verified.
Unfortunately, this creates a major security flaw: an attacker can also get your fingerprint image and then use it to log in to all your accounts.
In the SafeTok system, your fingerprints are stored only on the device. The biometric SafeTok device will check your fingerprints locally and will only inform the server, whether the fingerprint has been successfully verified.
This design has two important advantages over the traditional approach:
1. An attacker cannot possibly use your fingerprint image to log in
2. Your fingerprints are always safe with you on your biometric SafeTok USB stick
Is my fingerprint safe?
Your fingerprints are only stored on your SafeTok device – no one else has access to them. They are therefore always safe with you.
What about fake fingerprints?
Fake fingerprints are not an issue in the SafeTok system since fingerprints are not checked on the server but instead on the SafeTok device. Therefore, even if an attacker obtains an image of your fingerprint, he cannot use it to log-into your account. Similarly, even if the attacker steals your device and has created an artificial copy of your fingerprint he will still not be able to log-in because the fingerprint check relies on some features unique to the skin such as body temperature and blood vessel location which cannot be faked.
What is fingerprint privacy and why should I care?
Fingerprint privacy means that no one but you has access to your fingerprint. You most definitely should care since the danger associated with a data leak increases as more organisations rely on your fingerprint data for authentication. If your fingerprints are leaked out from one organisation the attacker will be able to access all other accounts relying on remote fingerprint checks. To avoid this, SafeTok checks fingerprints locally and stores them only on your device which is always under your control. To find out more about fingerprint privacy, visit our biometrics section.
Web Admins
How is SafeTok different from other security systems?
SafeTok is not only the most secure authentication solutions on the market but it is also the most convenient. It is extremely easy to set-up for web-admins (integration takes roughly 10 minutes) and to use for end-users. End-users don’t even need to buy a custom hardware device but can use whatever device they prefer.
Will our users have to change their surfing habits?
No, not at all. Users will continue visiting your website through their preferred browser. There is nothing new to learn for them. The only additional new action required is to connect their SafeTok device to the computer (unless it is already connected in which case they don’t need to do anything) and to swipe their finger (if fingerprint protection is enabled)
How will the user experience change?
Not at all. Users will stay on your website during the whole authentication process. The only design change will be a SafeTok message appearing and your website fading out during the authentication process. See for yourself what it looks like on our screenshot page or our demo page.
Is SafeTok compatible with all browsers?
Yes! It is compatible with all major browsers: Internet Explorer, Firefox, Chrome, Opera, Safari, etc.
How will SafeTok affect the current site security?
Integrating SafeTok will significantly increase your website security whilst not affecting your internal security level. Since SafeTok is added on top of your existing security protections, there is no risk whatsoever involved.
Integration
Preliminary Info
Do I need to install new software on the server?
No, there is no need to install any new software on your web server.
How long does it take to integrate?
Integrating SafeTok is very easy. Even a novice webmaster should be able to integrate it within 10 minutes. Watch our integration videos to see how it is done.
Do I need to decide right now which version of SafeTok to offer to my users?
No, not really. You can integrate SafeTok now and then adjust in the website manage area your authentication settings (e.g. whether to enforce SafeTok protection, whether to enforce Biometric authentication, etc.) anytime. However, should you plan to enforce SafeTok Biometric on all your customers, it would be advisable to contact us first, in case you would like to provide all your users with customised SafeTok Biometric USB Sticks.
How can I get started?
Getting started with SafeTok integration is easy:
- Register your website with SafeTok
- Watch our integration video
- Integrate it! (see technical manual)
-
Using SafeTok
Enabling SafeTok protection
How can I start using SafeTok?
If a website supports SafeTok, then when you log-in you should be given an option of enabling SafeTok protection. Just click this button and you will be taken through the process. It's easy and just takes a minute or two.
If you haven't ever seen a SafeTok message, then it is most likely that the web page does not support SafeTok. In this case, you will not be able to use SafeTok until your web admin adopts it.I already saw the message asking me whether I want to enable SafeTok protection and clicked "don't remind me again". Can I still enable SafeTok?
Yes - you can! In your log-in area there should be a link in the menu called "SafeTok Protection". If you click on it you will be directed to the SafeTok website where you will be able to set-up your protections.
Software Installation
Do I have to install software to run SafeTok?
Yes – in order to use device authentication you will have to install the SafeTok software. But don't worry - it only runs in the background - you won't have anything to do with it, other than installing it! Actually, if you buy a SafeTok Bio stick, you will not have to do anything at all – the software is already on the device and will install itself automatically!
Can I use SafeTok even if I can’t install the SafeTok software?
Yes, you can. However, you can only enable the SafeTok virtual keyboard and e-mail authentication. You cannot use either device or device + fingerprint protection.
How to install the SafeTok software?
Installing the SafeTok software is easy. Just download it from our website and follow the installation wizard! And if you buy a SafeTok Bio stick you won’t have to do anything at all – it will already come with the SafeTok software on it!
My Windows/Firewall/Anti-Virus/.. gives me a warning when installing the SafeTok software - what should I do?
If you get a warning, please choose the "allow" or "unblock" option in order to ensure that SafeTok functions properly.
Enabling SafeTok Device Protection
What devices can I use?
For SafeTok Express (two factor authentication, device) you can use your virtually any gadget that can be connected to a computer: USB Sticks, Memory Cards, MP3 Players, Mobile Phone, etc. find out more)
Can I use the same device to protect several websites?
Yes, you can use one device to protect all your web accounts.
How do I register a device?
When you set-up SafeTok the first time, you will be completely guided through the process by the set-up wizard. To register a device, just connect your device to your computer when the set-up wizard asks for it. If you have it already connected, unplug it and re-connect it.
If you have already been using SafeTok for some time and would like to register an additional device, click on the “register additional device button” in your SafeTok area and follow the wizard.Enabling SafeTok Fingerprint Protection
What devices can I use for biometric protection?
For SafeTok Biometric (three factor authentication, device + fingerprint) you have to register a biometric USB stick, such as a SafeTok biometric USB stick .
How do I enable fingerprint protection?
Just register your biometric USB stick like any other device. SafeTok will recognise automatically that it can be used for fingerprint protection, and ask you to register your fingerprint.
How many fingerprints can I register?
You can register as many fingerprints as you wish. So even if you injure one you can still use the others ;) You can also name the individual fingerprints (i.e. Tim's thumb - left hand) and delete them.
Back-up devices
What is a back-up device?
A back-up device is a second device you register with SafeTok and store in a secure place so you can use it in case you loose your main device.
Why would I create a back-up device?
If you loose your SafeTok device you won’t be able to access your accounts anymore. To ensure that you can still access them even if you loose the device you use every day it is a good idea to create a back-up device.
How do I create a back-up device?
After you have registered your first SafeTok device the set-up wizard will immediately ask you to register a back-up device. You are highly advised to do so, although you can choose not to. Should you later decide to register an additional back-up device, go to your SafeTok area and click on the “register device” button.
If I copy the data stored on my device - will I be able to use the device I copied it on as a back up?
No - you won't. For security reasons, this is not possible (otherwise someone may just copy your device when you aren't looking). If you wish to create a back-up device, please go to your SafeTok area and click "register device". You can register as many devices as you wish. Each device registered acts as a fully functional back-up.
Log-in Process
How do I log-in with SafeTok protection activated?
As usual! Just visit the webpage, and enter your username and password. If you have your device already connected to the computer, that is all. SafeTok will recognise it automatically. If you don’t, connect your device to the computer. That’s it.
Except of course, if you have biometric protection enabled. In that case you will need to swipe your finger over the fingerprint sensor too. Not that this would take long..I have my SafeTok device already connected, do I need to do anything else?
No, if you have the SafeTok device already connected, you will be immediately logged in after you have entered your username and password. Except, of course, if you have fingerprint protection activated. In this case you'll need to swipe your finger, too.
Loosing & blocking devices
What it if I loose my device?
First of all, you can always block your device in your SafeTok area. It is however important to
a) name your devices so you know which one you want to block
b) register at least two devices and store one in a secure place (like a second home key) so you always have a "back up device" which you can use if you first device gets stolen.
c) alternatively, register an e-mail address for e-mail authentication
Secondly you should not worry about loosing your device too much - your web page still requires you to enter your username & password and, if you use a biometric SafeTok device, you still have to swipe your finger - and you can be sure that the thief's fingerprint won't match yours..Can I block a device?
Yes, in your SafeTok area, just click on the block button next to the device you would like to block.
Can I delete a device?
Yes, just click the delete button next to the device you would like to delete in your SafeTok area