Strong authentication at universalbox.com for your protection

[universalbox]

Using static passwords for authentication, as it is commonly done, has quite a few security drawbacks: passwords can be guessed, stolen, etc... A better, more secure way of authentication is the so called "two-factor" or "strong authentication" based on one time passwords ("OTP"). Instead of authenticating with a simple password, each user carries a device ("token" which can be your mobile phone for example) to generate passwords that are valid only one time. Commercially available tokens look like pocket calculators or key fobs with a display and a keypad. To generate a one time password, the user has to enter his personal PIN into his mobile phone. So the authentication is based on two factors: the mobile phone and a PIN ("something you have and something you know"). This is obviously more secure than just a password, as an attacker needs to get hold of both the PIN as well as your mobile phone.
You can easily get started with strong authentication and it is completely free. Check out Mobile-OTP: Strong Two-Factor Authentication with Mobile Phones for OTP software for your mobile device (iPhone, Android or anything else)

Example for iPhone:



1, Download iOTP from Apple's App Store (free)





2, In iOTP add a new account like ub, universalbox or whatever you want.





3, Also generate a secret (16 or 32 characters)


The result is:




4, Now at universalbox.com, log in and go to My Account, then update account information (you don't have to change anything, just re-type your password there)

5, On the next page (OTP setup) you will be prompted for the secret characters generated by iOTP. Also a PIN is required, but it can be any 4 digit number like 1234 or whatever.





6, Upon submission a new page will appear to enter your One Time Password generated by iOTP.

In iOTP go to key menu and type the PIN you used at universalbox.com



A One Time Password will appear:



Using that password you will be authenticated and therefore your account will be updated successfully.





That is all, the same "One Time Password" page will appear as you login to universalbox.com

The password is valid for 5 minutes, but can be used only once.

We strongly recommend to use this kind of authentication to save yourself from headaches.