Peripherals
Important note for Microsoft Fingerprint Reader users with Internet Explorer 7. Nov 8 2006
Internet Explorer 7 is now out of beta and will start to be delivered to Windows users via Automatic Updates shortly. As it stands at the moment there are some serious problems in conjunction with the Fingerprint Reader:
- Existing passwords to websites (accessed via IE6) no longer work.
- Adding new passwords works but it is very slow and quirky.
We would recommend that before you install IE7 or run Windows update that you make certain that you have an alternate record of your passwords, for example stored in Password Safe (download free from Sourceforge).
Eagle-eyed reader Louis-Martin emailed us to say that Microsoft has released updated DigitalPersona drivers for their Microsoft Fingerprint Reader. (Many thanks to him for letting us know!) Version 2.0 supports both 32-bit Windows XP and 32-bit Windows Vista (there are different drivers for each operating system). Updated drivers are available from the Microsoft site. Interestingly, no drivers as yet for 64-bit versions of Windows.
Microsoft Fingerprint Reader - Questions
Read our first and second reviews.I really love this device. It's quick and easy to setup and you sure do miss it when you're using someone else's PC! But there are some drawbacks and things to watch out for when using the Microsoft Fingerprint Reader. So here are some of our answers to questions we've been asked:
But, what about security?
One of the major drawbacks is security of course, so I'm while I think it's a great tool of convenience, I'm not denying there are obvious risks. The Microsoft Fingerprint Reader is not, as many people seem to think, an enhanced method of security that improves upon strong passwords. Microsoft make it very clear that it should not be used for anything more secure than website logons, and then not for classified, security or finance-related sites. But on the plus side, passwords and usernames stored in the registry are encrypted and cannot be read, so it would take some work to get back to the original password without the appropriate finger!
There are the wider issues surrounding the security of biometrics which I won't get into here. And of course there are some pretty bizarre ways to fool the fingerprint readers, for example fake fingers made out of Gummi Bears. (I have tried various substances to create a dummy finger with no success yet. But we are still working on replicating this so watch this space!)
Will it lose my passwords?
The only error with the passwords that we've come across is detailed below, so losing your passwords isn't impossible.
Microsoft Fingerprint Reader error: "Your logon data is not accessible. Please notify your system administrator."
This error allows you to logon to to your computer but appears later when you try to logon to a web page. Your fingerprint is correctly recognized but the password software (Digital Persona Password Manager) is unable to access the data containing the usernames and passwords that would be input to log into the web page.
One cause for this is resetting a user's password through Administrative Tools | Computer Management (eg. using Method 2 to reset a password). While you can still logon to Windows using the Fingerprint Reader, you can no longer access the credentials for that user eg. you can't logon to websites! Of course there is a warning in the Computer Managment console that this will happen when you reset a password (so as well as your fingperprint password cache other data loss includes certificates, encryption/EFS, private keys, web page credentials, file share credentials and personal data).
Fix: If you know the original password resetting again to that through Computer Management will fix the problem. You can then change the password to a new one using Control Panel | User Accounts (which is always the method to use for changing a password unless you really have lost the password and you have not created a password reset disk.)
If you don't have a password reset disk and you really can't remember the logon password then the only option is to reinstall the Digital Persona software that came with your fingerprint reader. You must uninstall the software (which requires a reboot) and disconnect the device before reinstalling but it will get you up and running again, although your passwords will need inputting again.
However, if you reinstall Windows on your system (or move to a new PC) you will lose those passwords and while Windows Settings and Transfer Wizard will help you transfer most settings to your new installation it doesn't transfer Fingerprint Reader passwords. So while it's very handy for quickly inputting passwords into web pages, it's clearly not the place to store those passwords! You should think about storing your passwords in a program like Password Safe or a similar secure application if you want to be sure you don't lose them.
Why doesn't the Fingerprint Reader doesn't let me logon after Hibernation or standby?
You can find two answers to these here and here.
Why do I get an error when I set my PC to standby?
Here ya go.
I like the Fingerprint Reader for webpages but I don't think it is secure enough to logon to Windows. What can I do?
I think the ability to disable the Fingerprint Reader from being used to logon to Windows would be a valuable addtion to the software!
The option to disable the Fingerprint Reader for Windows logon use is perhaps an essential requirement for the next update to the software, especially given Microsoft's own stern warning regarding security issues surrounding the Fingerprint Reader:
Microsoft: "The biometric (fingerprint reader) feature in this device is not a security feature and is intended to be used for convenience only. It should not be used to access corporate networks or protect sensitive data, such as financial information. Instead, you should protect your sensitive data with another method, such as a strong password that you either memorize or store in a physically secure place."
Why doesn't the Fingerprint Reader work with some websites?
The reader works for logon screens and password forms for most websites. Unfortunately, the reader doesn't work for all types of Logon, for example logon screens for Wordpress's blogging software.
So, why doesn't it work with Wordpress? Funnily enough what prevents the Fingerprint reader from working is actually a simple CSS style rule in the Wordpress logon screen (wp-login.php):<style type="text/css"> #pwd {font-size: 1.7em;} </style>(Instructions for Wordpress version 2 onwards).
What about other websites?
There are a few other issues that prevent the software from signing in. It won't recognise logons for cross domain frames.
Another limitation is if you have multiple user accounts at a particular website it will only remember one per web address. It would be handy if there was an option to have it just fill-in the password field and let you fill in the username.
Many logon page addresses, for example MSN, Google and Yahoo, are dynamic - that is you get a slightly different URL in the address bar each time you go there. This can confuse the fingerprint reader, which uses the URL of the page to remember whether or not it has a password stored for that page. Likewise if you need to change or delete the settings for a logon page you do need to navigate back to that page in order to access the fingerprint settings for that page - difficult if the URL changes! A central place to manage passwords would therefore be a very welcome and necessary addition to the software.
How do I clean the fingerprints off my reader?
I use sticky tape to remove any fingerprint grease that has built up on the reader. It doesn't need it too often but when it does start to throw up a lot off errors, it's quick and easy to fix. More here about that.
Can I still log in to a website without using the fingerprint reader? (i.e.when I'm at work)>
Yes. All the fingerprint reader really does is type in your password for you when you put your finger on it. If you prefer to type your password instead that will still work too and if you are away you can still log in to websites using a password.
Will it work with other other applications?
Yes it works with various software. For example you can use it with Password Safe but depending on the type of passwords you store in there, it goes against the rule of only using the Fingerprint Reader for 'unimportant' passwords (ie. not relating to finanical or privacy related data about you).
What about other browsers?
No. It doesn't work with Firefox or Opera. There is a plug-in which promises to make it work with Firefox, but I haven't tried this and some experts have expressed doubts about its security, so I can't recommend it.
Got a question that's not answered here? Click the email link at the bottom of the page!
Buy from:
Amazon.com |
Amazon.co.uk
Page 1 - initial review | Page 2 - second review | Page 3
Kathie Kingsley-Hughes
Last updated: Nov 8th 2006
Print This Page |
Email me when this page changes
| Search This Site
Out Now!
