A place for all things security.
:date_medium
We continually review our product roadmap to include customer feedback, which has led to our recent update to admin permissions. To better match our user’s workflows, we’ve consolidated a couple of permissions and expanded some roles, read on to learn more. Add Users and Add Accounts replaced with Team Manager Instead of having unique roles for adding users and accounts, we’re consolidating these roles under a single Team Manager role, which also allows the managers to remove users from a team and edit/delete team accounts.
:date_medium
As our users continue to scale their companies, this often also means roles and responsibilities change. Becuase of this, we’ve found that sometimes a company needs to change who has control of the company accounts within CommonKey. This week we’ve released the transfer company feature, which allows the company owner to select an existing team member to take over full control of the company. You can find the transfer feature within the edit company pop-up, which can be navigated from the company dashboard by clicking on the cogs icon next to the company name.
:date_medium
By popular demand, we’ve released the export feature so you can create backups of all your accounts for both personal and company accounts. There’s two ways you can export your CommonKey data: For company accounts, you can find the export link on the company settings page (next to the company name, requires being the company admin). For personal accounts, you can export all of your personal accounts via a link on your CommonKey account settings page.
:date_medium
One of the amazing things about CommonKey is our engaged community that helps our team easily define the product roadmap. Based on awesome user feedback, we’ve released the notes feature that allows users to add additional information to an account (auto-login or custom account, up to 250 characters). This feature release allows users to easily add additional information to accounts like required questions they have to answer to authenticate, additional tokens, or instructions to shared team members.
:date_medium
If you caught the most recent episode of HBO’s Silicon Valley, Richard Hendricks was faced with a difficult decision based on an action by one of his employees, Bertram Gilfoyle. A new competitor in the compression space named END | FRAME emerged the previous episode when the Pied Piper team backed out of a partnership with the energy drink company Homicide. However, after looking up the company, the Pied Pier team quickly recognized the END | FRAME team as the ‘vulture’ capitalists that ‘stole’ Pied Piper’s technology during an investor meeting.
:date_medium
Have a few minutes this afternoon? Watch our co-founder and CEO, Andrew Stroup, pitch CommonKey to Deirdre Bolton during the Fox Business Risk & Reward segment, Elevator Pitch. Andrew will have 30 seconds to pitch CommonKey to Deirdre while riding an elevator up to a room where three NYC Venture Capitalists wait for him with questions. The VCs are Kate Shillo from Galvanize Ventures, Deepen Parikh from Interplay Ventures and Nic Poulos from Bowery Capital.
:date_medium
The popular team collaboration and group chat tool Slackwas recently hacked, leaking over 50,000 emails and other personal account information. Fortunately, the passwords weren’t compromised, but additional security precautions were recommended to further protect user data. Slack is a collaboration tool that is a collection of user-defined chatrooms that support file sharing and private messaging, Slack was launched in August 2013, and within 24 hours of launch had attracted 8000 signups.
:date_medium
Uber, the well known car service that’s been disrupting the livery industry, announced last Friday, February 27th, suffered a data breach back in May 13th, 2014. The breach affected 50,000 drivers across the United States, a small percentage of the Uber driver base according to Uber’s Managing Counsel, exposing the names and drivers licenses. We discovered in September that information allowing someone to access the database had been available without intended access restrictions.
:date_medium
In light of the recent Sony hack and Obama’s new proposals to crack down on hackers, Jimmy Kimmel decided to hit the streets and expose the ‘vulnerability’ of passwords used by the masses. In this comedic bit, people were asked how they went about choosing a password, which typically consisted of elements such as family/pet names, significant dates, and other relevant personal information. They were then asked round-about questions regarding these elements, exposing the actual password in the same series of questions.
:date_medium
Hackers have now shifted to a new tactic, taking over [website][1] servers and encrypting all the data, demanding payment to regain access and decrypt the files. The Swiss security firm, High-Tech Bridge, calls these attacks RansomWeb and identified such a case in December 2014, the victim being a undisclosed large European financial services company. Traditionally, this ‘ransomware’ attack via malware usually requires individuals to pay $100-1000 to recover their accounts, but now that focus has turned to organizations, the ransom amount will undoubtedly increase to much larger sums.
:date_medium
Anthem, a giant insurance corporation, was recently attacked by hackers who stole 80 million customers’ personal data. The kicker to this attack was the data stolen wasn’t encrypted despite numerous health information standards and laws to protect said patient information. Customer data stolen included social security numbers, [email][1] addresses and other personal information. One of the most common healthcare laws, the Health Insurance Portability and Accountability Act (HIPAA), doesn’t require health care companies to encrypt patient’s personal information.
:date_medium
After many requests, the CommonKeyteam is excited to announce our new Affiliate program. We are excited to partner with amazing companies and consultants to help spread CommonKey to businesses across the globe. Beyond our Affiliate program, we’ve also added a Reseller tier to those who are focused on mid-market and enterprise clients. Interested in becoming a CommonKey affiliate? Check out our program and sign-upto get started today!
:date_medium
Sony Pictures Entertainment is the most recent victim by hackers who leaked documents onto the internet, to include a folder titled “Password,” which was used to save thousands of company passwords. Sony is one of many recent hacks on corporate companies, which has publicly shamed them for poor security practices and solutions. Not only were passwords stored in a very obvious folder, but additional files included social security numbersof 47,000 employees and actors, to include Sylvester Stallone, Judd Apatow, and Rebel Wilson.
:date_medium
A Widemeyer survey in North America and the UK revealed startling data on password negligence among small businesses. Among the critical mistakes include continuously using the same password across multiple accounts, keeping a hand-written book of passwords, or not using passwords altogether to access work data. Identity management company Centrify claims that a company of 500 employees would lose $210,000 annually as a result of these mistakes. The CommonKeyteam is a big supporter of small businesses – we urge all SMB owners to follow simple password management best practices to keep your company secure and to improve productivity.
:date_medium
JP Morgan Chase Co, America’s largest bank, was hacked by cybercriminals; among the information leaked included personal contact information of individuals and small businesses. Luckily, the bank reports that bank account information was not leaked, but the very fact that one of America’s most powerful institutions was hacked has caused much uneasiness within the organization and among its customers. The source of the attack is unclear, although hackers in Russia and Eastern Europe have been among the FBI’s recent suspects.
:date_medium
Password hacking, breaking into a company, viewing top-secret material – seems like the things only seen in the movies. Turns out you don’t need “1337hax” skills to do so when the top 10 corporate environment passwords are things like “password1” and “hello123.” The results of a recent study by the NetworkWorldvia a series of Trustwavepenetration tests of corporate environments environment in 2013 and 2014 resulted in an astonishing result of insecure and reused passwords for company accounts.
:date_medium
Russian hackers used mismanaged Stubhubaccounts to fuel their recent international money laundering operation. The hackers breached Stubhub accounts to purchase and resell high-demand tickets. Unlike Target’s security catastrophe, where the company was directly breached, Stubhub’s hack was likely a result of mismanaged passwords. Everyone should have a different password for each online account, consistently check your accounts for suspicious activity, and rotate your passwords using a strong password generator. Having difficulty memorizing all your company passwords?
:date_medium
A combination of recent phishing scams and weak passwords resulted in a massive e-mail hack. Usernames and passwords from Gmail and two Russian-language services, Yandex and Mail.ru, were made public. Sources say that if your e-mail has been compromised, it is likely that the leaked passwords are too old to grant hackers access. However, it is still recommended to be on the safe side and check out websites such as ‘Is my e-mail leaked’ to see the security status of your e-mail.
:date_medium
The CommonKeyteam just received word we were accepted to compete in Techweek NY, the nation’s leading technology conference and festival. The event is a massive gathering of startups, technologists, and entrepreneurs that make an impact in NYC and across the globe. There are events the entire week starting September 29th through October 5th. CommonKey will be participating in the LAUNCH competition on Thursday, where judges will have a chance to check out our booth.
:date_medium
A flaw found by Oxcitein some router chipsets now let hackers bypass the push-button security of WiFi Protected Setup (WPS) nearly instantly. What used to be a difficult task of trying to grab inbound or outbound data packets to crack the password, hackers now can take a single shot based on a series of offline calculations that take only about a second to complete. Fortunately, this vulnerability in the hardware isn’t in every router, but it’s likely found in relatively common chipsets from Broadcom and others that have yet to be named (as they rush to patch the issue).
:date_medium
CommonKeyhas been selected to present and compete in the upcoming Tech Cocktail’s New York Mixer & Startup Showcasetomorrow, August 27th at 6:30PM. If you happen to be in the neighborhood, stop by, say hello, have a drink and come learn about all the cool startups in New York City. Have a few seconds? Vote for us as New York’s Hottest Showcasing Startup HERE.
:date_medium
The hospital network Community Health Systemsannounced it was hacked on Monday, which has led to 4.5 million patients data being stolen. The hospital network operates 206 hospitals across 28 states in the United States and the hackers gained access to names, social security numbers, physical addresses, birthdays, and telephone numbers. The impact is huge as anyone who received treatment from a physician’s office tied to a network-owned hospital in the last five years, or was merely referred there by an outside doctors, is affected.
:date_medium
Going through a tough situation? Trying to set goals? In this article, the author explains his (non-traditional) therapy by changing his passwords to relate to his personal goals. From wacky passwords such as “Forgive@her” and “Sleep@before12”, he was able to accomplish goals such as getting over depression and maintaining a healthy lifestyle. Psychologist Ann Kearney-Cooke explainshow we tend to choose emotional, anecdotal, and easy to choose passwords. Hats off to all you goal setters!
:date_medium
A new report by former US officials pegged the cost of hacking at up to $575 billion per year, writes the Wall Street Journal. It’s a huge number. One of the biggest weaknesses, and a subject close to our heart, is insecure passwords, which are very often the entry point for hackers. So if you don’t yet have a team password management app, give CommonKey a try. And if you do have one, make sure to use long, randomized passwords and don’t recycle across different apps.
:date_medium
35 years of hard work, true commitment, and company loyalty came to an abrupt end yesterday when Target’s CEO, Gregg Stinhafel, stepped down from his post. His downfall came out of the of cyber blue when last December a bunch of hackers snapped up 40 million customers’ credit-card numbers in one of the largest data breaches in internet history. The incident has been followed by at least 90 lawsuits (and $61 million through Feb.
:date_medium
The CommonKey team headed over to one of the largest tech events in NYC, NY Tech Day. Instead of setting up a booth, our mascot, Coco, decided to make the rounds at NY Tech Day to say hello to some of the awesome NY-based startups that are making a difference in the world. Coco was passing out bananas and taking lots of photos and selfies with the people who makeup the NYC startup community.
:date_medium
After 4 exciting months, the CommonKeyteam concluded NYC-based ERA‘s accelerator program, being one of ten startups in their sixth class. We had a chance to highlight all the progress the company has made in such a short amount of time. To learn more about the event, details can be found on one of the various media blogs covering the event. Links are below, along with a couple of additional photos. Here are the 10 startups graduating New York’s ER Accelerator todayThese 10 hot startups just rolled out of ER AcceleratorData, Dinner Parties, and … a Monkey Take Over ERA Demo Day
:date_medium
A study by Hewlett Packard estimates that it costs businesses an average of $1 million to resolve a cyber attack. The insurance rate amongst businesses surged last year as they began to realize the intensity and severity of the threat that hackers pose to their bottom line. While the financial services industry has been quick to hedge against this risk, the health care industry has been slow to adopt. Is financial data worth more than health information?
:date_medium
CommonKey’s very own Andrew Stroup weighed in on this issue in a recent article published in Dell Tech Page One. When asked about wireless adoption in manufacturing, he said that businesses must first ask themselves “How does the new technology impact the current security practices of a company, and what modifications are required to ensure the same or higher security practices are integrated into the company to accommodate the integration of the new technology?
:date_medium
:date_medium
CNet has been keeping an updated list of major websites that have and have not been impacted by this flaw, and whether or not they have updated their security. If you have an online web service, you can go here to see if your website is vulnerable to the attack. Even if the flaw has been fixed, you should change your password if you have an account on any impacted website.
:date_medium
Other Web sites shown as vulnerable by this tool include OKCupid, Imgur, and Eventbrite.
:date_medium
While the data stolen from Boxee appears to only cover online forum accounts, not service accounts, the high likelihood that users may have re-used the same password for both accounts is cause for concern. The issue is that hackers could use this data to gain access to both accounts and remove them from the user’s control before they learn that there has been a breach at all. As a rule of thumb, it’s always better to use a unique password for each account you have, and to never recycle passwords.
:date_medium
”The bottom line is that the weakest link in your security is often your employees. As a business owner, you have to gauge how they use company computers and what they access while on the network, and sometimes even at home if you have a Bring Your Own Device (BYOD) policy.” “This was caused by an email attack on an employee with super administrative permissions,” he explains. “That’s all it took to let the Syrian Electronic Army gain access to the entire company’s assets, and the hackers could have deleted everything if they wanted to.
:date_medium
:date_medium
The full text of their e-mail sent out to users is included below:
:date_medium
Followed by the well-noted Starbucksmobile app security SNAFU (and Delta, Facebook, Match.com, and eHarmony), Walmarthas followed suit with their iOS mobile app that exposes users’ passwords, account names and email addresses, as well as many geolocation details and list of recently viewed/scanned products. Walmart is the largest company in the US by revenue and has a very large and experienced IT staff, so what went wrong? Since the initial report by Daniel Wood (CISSP, GPEN), an independent penetration tester, Walmart has already resolved many of the security issues and is still fixing the geolocation problem.
:date_medium
The rise of cyber-attacks on companies has been on the rise over the past couple of years. Initially, the attacks were more prevalent with tech-centric companies like Evernote, Facebook, Twitter, LinkedIn, but as more traditional companies (e.g. Target) have moved to the internet to provide their customers with additional market reach, they’ve also been targeted by cyber-attacks, often leading to disastrous outcomes for either the company, their customers or both.
:date_medium
The interim privacy commissioner of Canada, Chantal Bernier, released information regarding an incident where a portable hard drive containing over half a million Canadian student’s loan records went missing. Bernier noted the hard drive was left unsecured for extended periods of time and was not protected with a password or any type of encryption. Furthermore, Human Resources and Skills Development Canada acknowledged last year the drive held data on 583,000 Canadian Student Loans Program borrowersfrom 2000 to 2006.
:date_medium
We just released a big update, which includes a new UI design, admin permissions, and a new billing structure. We’ve moved the dashboard to app.commonkey.comand we’ve updated a few security items. Check out the details below! New UI Design After some amazing feedback from our users (that’s you), we’re releasing the first phase in a transition to a newly re-designed UI based on how you manage your company. Super Admin Permissions Company owners can now give super admin access to trusted individuals so they can help manage their company.
:date_medium
At the end of February, the CommonKeyteam headed to RSA Conference 2014to rub elbows with other security nerds and talk shop about all things security. The conference is one of the largest gatherings of security professionals from all sectors and industries. Separated into two main exhibit halls, the Moscone Centerin downtown San Francisco was packed with elaborate and gigantic displays and visuals. There were giants with mega displays like McAfee, Symantec, HP, and IBMand countless other companies who filled out the exhibit halls with free swag, booth babes, and demos of their products.
:date_medium
:date_medium
Based on a report by an IT consultant, Paul Moore, the Virgin Media Superhub router/modem combo allows for a seven second window of vulnerability when powered on, where the admin password is exposed. “After the seven-second window, the router takes the Wi-Fi card offline, enables encryption and brings the card back up,” Moore explains. “That’d be great, if we hadn’t already broadcast the encryption key to everyone nearby.” The device is manufactured by Netgear and is limited to the VMDG485 hub model, identified as the SuperHub2 by Virgin Media.
:date_medium
The Ponemon Institutereleased results of a study sponsored by tyntec, a mobile interaction service provider, that reveals 50% of One-Time Passwords (OTPs) fail to arrive due to invalid mobile numbers provided by end-users. The study was based on a survey of 1,800 IT and IT security practitioners around the world. Research also identified 65% of respondents felt text-based passwords was insecure and 90% of It managers plan to adopt SMS-enabled two-factor authentication (2FA) in 2014 to improve online security.
:date_medium
While most of us have the common sense to protect our phones with some sort of passcode, we tend to default to simple phrases like “0000” or “1234.” Saurabh Harit, an IT professional and smartphone expert, said at a recent security conference in Vancouver that “If you put some effort into setting a good password, you can protect your phone…I know it’s not very convenient to type an eight-digit password or an alpha-numeric password…but that’s the least you can do to protect yourself.
:date_medium
:date_medium
When asked, a senior Delhi Police officer admitted that the department’s failure to investigate these cases was “a technical problem”. “The Delhi Police remains committed to public grievances,” he added. The two officers in question were able to keep their jobs, and have since participated in an hour-long “training” exercise. This extremely lucky duo is now reportedly able to access the system and process complaints. Let’s just hope they didn’t set the password to “12345.
:date_medium
:date_medium
While all of this is cause for concern, this may just be the tip of the iceberg. The Wall Street Journal is reporting that Verizon is investigating data breaches at two yet to be named major retailers. These intrusions appear to be similar to the hack that compromised Target’s system late last year which led to 40 million customer accounts being compromised. While law enforcement officials have been brought in to try to get to the bottom of this mess, hackers have so far managed to stay one step ahead of the law.
:date_medium
If you think you’re the only one substituting a ‘$’ for a ‘4’ or ‘s,’ think again. Research has shown that by and large human behavior is fairly predictable, which helps explain why ‘Password’ continues to be the most commonly used password despite years of news stories warning against its use. Passwords such as ‘zu49pw8zzqq’ survived telepathwords’ digital interrogation, while phrases like ‘iloveyou’ and ‘denverbroncos’ were dead giveaways. /SEO Ultimate –>
:date_medium
On Friday, a patch for iOS was released (7.0.6) to fix a long standing bug (not to the public) that allows a straightforward way to intercept and decrypt SSL/TLScommunications. SSL/TLS is used for secure transfer of information, often seen in secure websites like banks and e-commerce websites where sensitive information like credit card data is handled. Good for Apple, right? Well it would be, if not for the following two reasons: 1) there is still no fix available for OS X, meaning all Apple hardware running OS X still remains vulnerable and 2) this issue has been apparently known by Apple for some time.
:date_medium
Following the recent University of Maryland hack, another state entity, the Oregon secretary of state’s campaign finance and business registry websites were hacked. This recent hack has led to mass password resets for all accounts and a request to change any other services the use a similar password. Additionally, affected users were issued information on monitoring their credit and identity. The agency noted political committee’s banking information (e.g. account numbers) were encrypted and they have reported the incident to law enforcement authorities.
:date_medium
:date_medium
On February 14th, the Syrian Electronic Army (SEA) via Twitter reported another attack, this time on Forbes‘ publishing platform, stealing user logins and passwords. This has been a part of a series of attacks by the SEA on Western media organizations (e.g. BBC, CBS, Financial Times, New York Times, and even The Onion). Forbes recognized the attack in a statement by a spokesperson, “Forbes.com’s publishing platform was compromised. We’ve been making adjustments to the site to protect online privacy and the editorial integrity of our content.
:date_medium
Going to sunny San Fran next week for the RSA Conference? CommonKey is too and we’ll have sweet t-shirts and stickers of our monkey sentry. Come find us, let’s connect and talk security (email). See you there!
:date_medium
While there may be no such thing as bad publicity, this certainly can’t be helpful. This employee chose to quit in one of the funnier ways imaginable, made possible in large part because she had access to the company passwords. Not to be outdone, her boss made his own response. Click here to view the workplace drama as it unfolds.
:date_medium
So were any lessons learned? Hopefully. America has lagged behind pretty much the rest of the world in adopting chip-based credit cards. As a result, hackers hoping to capitalize on this security weakness have increasingly directed their attacks at companies with large amounts of American customers. Credit card companies are now seeking to have America join the 21st century by adopting a pin and chip system for processing payments.
:date_medium
Kickstarterhas reported that on Wednesday night their servers were compromised by hackers (notified by law enforcement officials), gaining access to private customer information. Although Kickstarter reports no credit card information was accessed by the hackers, personal information including email, mailing address, phone numbers and encrypted passwords were taken. The security vulnerability has now been resolved, but the impact to customers is still present. Kickstarter noted using different salting methodologies, SHA-1for older users and bcryptfor new users, which has been proven to be a stronger methodology for salting passwords before being transmitted and stored on servers.
:date_medium
In an exclusive article by NBC News, more details have been released about how Edward Snowden accessed, removed, and disseminated classified NSA documentation to the public. Based on a NSA memoreleased by Ethan L Bauman (Director, Legislative Office) to the Congressional committees investigating the matter, three people were identified in aiding Snowden: a NSA civilian, active duty military member, and another contractor (contract company unidentified). As a quick refresher, this all started on June 5th, 2013, when a series of exposés released information regarding internet surveillance programs and interception of US/EU metadata.
:date_medium
SnapChat acknowledged the hack, saying in a statement to TheNextWeb that “Yesterday a small number of our users experienced a spam incident where unwanted photos were sent from their accounts. Our security team deployed additional measures to secure accounts. We recommend using unique and strong passwords to prevent abuse.” Twitter has been abuzz with the latest and greatest on this SnapChat fiasco. If you’ve received a smoothie picture don’t click on the link, and if you think your account’s been affected, reset your password ASAP.
:date_medium
:date_medium
Even if you’re one of their many users who don’t use a Comcast or Xfinity email address except to login to your account, the only way to ensure your data is protected moving forward is to change your password. Change it.
:date_medium
We released a feature last night that allows you to choose whether auto login credentials are visible to team members through the dashboard. By default visibility is turned off, so if you need to allow your team see the password, you’ll need to go into the dashboard and turn the feature on. Every update we released is based on your direct feedback so keep them coming! Cheers, The CommonKey team
:date_medium
The landscape of online interaction is changing drastically, and digital marketers have their work cut out for them to get potential customers to engage. Will better privacy protections help reassure the consumer? Who knows. The only thing that is certain is that this issue will continue to evolve as people start to recognize the full value of their personal data.
:date_medium
In today’s world, passwords can have a varying number of requirements. We’ve created a random password generator for you to use to meet all the different password requirements out there. You can select whether your password requires a lowercase, uppercase, number and/or symbol as well as the length of the password. Simply click “Generate Password” and it’ll create a random password for you on the fly. Check out the password generator here.
:date_medium
:date_medium
Most of us are pretty bad at picking secure passwords, and as it turns out the U.S. Government is no different. Several agencies, including the Internal Revenue Service, Nuclear Regulatory Commission, Department of Education, and the Department of Homeland Security have been found to have serious deficiencies in their cybersecurity and password management systems that places reams of highly sensitive data at risk to being poached by hackers. The report outlines the perilous state of information storage, including Federal Emergency Management Agency databases secured by default passwords and nuclear facility data stored on easily hackable unsecured drives.
:date_medium
http://www.youtube.com/watch?v=a6iW-8xPw3k
:date_medium
Every now and then the public gets to catch a glimpse of what goes on behind the scenes of a major broadcast television network. Over the past several years, these TV easter eggs have ranged from funny to obscene, but this particular incident takes it to a whole new level, security vulnerability. During a pre-game show, CBS broadcasted a “behind the scenes” look of the Super Bowl Security team, staring at huge monitors, flexing their tech toys, and showing a little “magic” behind the curtain.
:date_medium
16 million people were impacted by the security breach focused at the German government. The attack primarily focused on emails and passwords and the hackers were successful in compromising over 600 email login details. Beyond the shear impact on the number of people affected by the attack is the underlying poor public response by Germany to come forward with this information. The security breach has been known to German authorities since August, but public outreach and awareness related to the attack only started appearing last week.
:date_medium
Yahoo! Mail users, welcome to the club! You’ve joined a not so selective group of people who have been the victim of another attack on a large online service that stores countless user’s sensitive information (totaling around 273 million users). Late last night Yahoo! Mail’s servers were compromised via malicious software, gaining access to lists of user credentials. This has led to a massive password reset for the affected accounts, notifying users via email (insert irony of notifying user’s about an email attack via the same attacked email).
:date_medium
Are your employees protecting the “keys” (read passwords) to your company or putting them at risk? Well if you’re hiring 20-somethings, they aren’t or at least not as well as their Baby Boomer counterparts. In a recent study by Softchoice, 1,000 full-time employees across the US and Canada were surveyed regarding SaaS applications and their habits that impact security breaches and data loss. Here’s some quick stats the study found about SaaS app users:
:date_medium
Not to be confused with the 1985 film Gotcha!, more progress has been made on increasing your internet security from brute force attacks. Coming from the same institution as the ever popular CAPTHAs, Carnegie Mellon University scientists have developed a new approach to security authentication called GOTCHAs or Generating panOptic Turing Tests to Tell Computers and Humans Apart. How It Works: A user of a website using GOTCHAs would create a username and password.
:date_medium
To make it more official, we’ve moved the CommonKey blog to blog.commonkey.com (makes sense, right?). This is where you’ll get all the latest news on CommonKey and the various ways we help protect the keys to your company.
:date_medium
A friendly hello from NYC and ERA! Last night we released an update that makes it super easy to sign up and add your team members as well as an update to our pricing plans. Dashboard registration Users are now able to register from the dashboard. Whether you’re coming from our new home page (commonkey.com) or invited to a team, its hassle free! Invitations The next big change is the invitation workflow.
:date_medium
Employee turnover has become a serious metric for companies and their HR department. Hiring is typically a requirement for company growth as adding new talent to the team should lead to a higher overall work output and ultimately revenue. However, significant investment in training and integration into a company’s workforce and culture can be costly, both monetarily and financially. Unfortunately, employee turnover is a fact of life for all companies. Turnover varies by industry, but the average yearly turnover for all industries (according to the U.
:date_medium
In a recent initiative by the UK government named “Cyber Streetwise”, a cross government campaign funded by the National Cyber Security Programme has focused on raising awareness of proper cyber security best practices for SMBs. We couldn’t agree more. In fact, the CommonKey team recently had an interesting dialogue with Chris Dixonof Andreessen Horowitz about the need for government-level support to achieve a focused cyber security solution. The UK’s push resonates well with CommonKey and our goal to move things towards a better cyber security world in the SMB space.
:date_medium
“This important campaign initiative has been designed to help us all be a bit more measurably streetwise online. Most of the population are not doing enough to protect themselves. This means individuals and SMEs are making it far too easy for Cyber criminals to access your personal and financial data and steal your identity, often without you even realising it. It undermines confidence and threatens business growth online in the UK.
:date_medium
New York City! The CommonKey team has left the mean streets of Baltimore and found a new home in New York City. We were recently accepted into ERA NYC (eranyc.com), an awesome tech accelerator that is going to help CommonKey take team password management to the next level. We’ll be located in the heart of the city, just a few blocks south of Penn Station at ERA’s espace in Midtown.
:date_medium
While we continue to work on new features (like admin functionality), we wanted to send out a quick update with a requested feature and an update to our subscription plans. After talking to our beta users (that’s you!) about the subscription plans and what works and doesn’t work for your company’s needs, we’ve updated the tiers and pricing. We removed the limitations to the number of groups and added in another tier between the Personal (free) and the Plus plan.
:date_medium
Last night we pushed an update that enables members of an organization to view the login credential information on the dashboard through the Credentials page. This is the first step in preparing CommonKey for our complete admin permissions functionality. One step closer … Over the next few weeks we have new features planned, to include admin permissions. We appreciate all the great feedback so far so keep it coming! As always, thanks for using CommonKey as we continue to solve a big small business problem, protecting the keys to your company.
:date_medium
We made some updates last night, making our current features better based on your feedback! As we continue to make CommonKey the best choice in password management for teams, we want to make sure we’re tailoring our product to meet your needs. Shared Organizations update We’ve changed the way shared organizations are shown, so you can better track and manage the login credentials. Editable Organization Login Credentials We’ve added in the ability to edit login credentials from your organization, making it easier manage the keys to your company!
:date_medium
Last night we rolled out an update to include our subscription plans for CommonKey. Details on the plans and pricing can be found by navigating to your CommonKey profile (the drop down menu in the navigation bar). You’ll find details on the pricing plans (updated!) and the ability to set up your team prior to our plans going live on Oct 27th. Since you’ve been an amazing beta user, if you choose to sign up now, you’ll receive 10% for the first 3 months.
:date_medium
Feature updates We decided to tackle a couple of features that we felt were overdue, helping with your user experience. Along with these updates, we’ve also added some UI tweaks and addressed some outstanding bugs (extension related) with your help as we prepare to step out of beta. Replacing the pop-up window, we’ve given the My Account page a new face, allowing users to update their CommonKey profile pic, information, and password.
:date_medium
We’ve made some serious progress based on your feedback and requests. This round of updates include a re-design of our web application to be fully responsive and cool new features. When viewing the web application from your tablet or phone, we’ve customized the view so it makes using CommonKey easier than ever before! Each view maintains the same functionality as the desktop version, but tailored for each device. We’ve completely redesigned the extension top and side bar to better handle more websites and easily save login credentials to your CommonKey account.
:date_medium
The CommonKey team has been hard at work over the past couple of weeks implementing our new big feature roll out: custom credentials! We’ve also made some additional updates to help with the overall user experience, check it out below! Custom Credentials You can now easily add custom credentials in the dashboard for non-[website][2] logins (e.g. FTP logins) and sites not detected by the extension. Simply fill in the information and assign it to your Personal or organization lists.
:date_medium
This week’s updates include the ability to edit login credentials from the dashboard through the Accounts Management page. Paired with viewing passwords, CommonKey users can now edit their username and password for an application, which will then be automatically updated for them and their team. We’ve also made some other tweaks and bug fixes to make your CommonKey experience even better! Here at CommonKey HQ, we’ve been listening to your feedback and appreciate your invaluable input to help make CommonKey the best password manager for your company.
:date_medium
This round of CommonKey updates are focused on enhancing the extension user experience, whether that’s adding in new features or solving some silly bugs. Normally most web applications don’t go into detail about their bugs, but since you (our beta community) have been monumental in identifying and addressing these issues, we wanted to keep you in the know as we resolve them! First, we’ve added in the call where if you’re forced logged out of the dashboard, the extension will also automatically log out.
:date_medium
Although you may have thought we’ve been sleeping behind the wheel with our typical weekly feature roll outs, but guess again! The past week and a half has been a crazy whirlwind of coding and testing. We’re happy to announce some awesome features, with more on the way! We’ve updated a lot of HTML5/CSS3 to deliver an even better User Interface and more intuitive User Experience. Like the changes? Great!
:date_medium
Wow! There’s been a lot of movement since we went live on May 22nd. Here at CommonKey HQ, we just wanted to say thank you to all of our new users for taking the time to check out CommonKey as we solve a big small business problem. We’ve been hard at work adding new features based on your feedback. Over the next few weeks you’ll see some awesome feature roll outs (I won’t spoil the surprise for you).
:date_medium
The CommonKey team is happy to announce our public beta is live. You can download the Chrome browser extension in the Chrome Web Store here. As we continue to make updates, improvements, and roll out new features, our beta will be free for all users as you create organizations, groups, and share account logins with your team, family, and friends (always free for personal use). The past few months have been a journey, but we appreciate all the support from our family and friends.
:date_medium
Reporting live from CommonKey HQ, we just wanted to let everyone who is currently testing our closed beta and new beta sign ups know we’ll be releasing our public beta this week! From our team to yours, thanks for being supportive and providing such valuable feedback to date. We look forward to serving as your personal and small business password management solution.
:date_medium
More updates for our closed beta users are here and we’re excited to announce some really awesome new features! The first thing you’ll notice is that we’ve replaced that boring email icon with site favicons. We’ve also allowed users to handle group invitations through the extension, making it easier to review and accept access. And for the big update, by popular demand, we’ve enabled the ability to add accounts through the dashboard.
:date_medium
Over the past couple of weeks, a lot has been happening. We’ve been cranking away on a lot of improvements based on our user feedback. Over the next couple of days, expect updates to be rolled out that make CommonKey even better! Additionally, CommonKey’s co-founder/CEO, Andrew Stroup, has been in the limelight, hitting up Hollywood and the red carpet, for Discovery Channel’s new show, The Big Brain Theory: Pure Genius. Check out a few of the videos below about the show and Andrew!
:date_medium
It’s official, The Discovery Channel has announced CommonKey’s co-founder and CEO as a contestant on The Big Brain Theory: Pure Genius. Check it out and stay tuned for updates!
:date_medium
We are pleased to announce we have released our closed beta! Please stay tuned as we extend the closed beta to select users over the next few days and continue to add features. We’re very excited about the progress we’ve made so far and look forward to where this adventure will take us over the next several months. As always, we appreciate all the support and look forward to serving you as the best software as a service password manager solution for your small business and non-profit organization.
:date_medium
We’re happy to announce the release of our new website design and domain name (commonkey.com). The CommonKey team has been hard at work incorporating the feedback our alpha users have provided and we’re one step closer to a live beta release in the near future! Thank you to everyone who has help support this project and we look forward to serving you as best possible in the future.
:date_medium
The team would like to take the time to thank all of our private ALPHA testers as they’ve been helping us make CommonKey the best small business password management solution possible. We’re really excited about the progress we’ve made and look forward to our BETA release, coming soon! CommonKey also has some really exciting news, which will be released in the coming months with the BETA, stay tuned …
:date_medium
the CommonKeywebsite is live! Protect the keys to your company. CommonKey is your small business solution to password management. We’re proud to announce that the CommonKey site is live and ready to accept beta requests. Click around, drop us a line, and let us know what you think!