PasswordYeti is an application to ease the use of
the growing numbers of passwords. Besides it follows some rules to
handle your passwords in a secure way. The major topics for password
- Don't use identical passwords for different logins
- Don't save your passwords, escpecially not uncrypted and not
at the device where you are going to use them
- Use complex passwords that cannot be attacked by brute force
trying all combinations of characters or by password
A good approach for these goals is a password generator that
computes individual passwords for each login needed. The computed
password should not give you any chance to reverse the computation.
PasswordYeti uses the wellknown master password algorithm and
computes the password each time it is needed in a definite way. The
formula to compute the password has some input variables like the
site name, your login, the strenght of the computed password a
increasable counter and finally your so called masterpassword. These
inputs result in a password and so there's no need to save any
password. Even your masterpassword is not saved. If you forget it or
you enter a different masterpassword next time simply the result of
the computed password will be different.
If you don't want to switch completely to computed passwords,
PasswordYeti also supports traditional passwords which will be
encrypted before saving them to your device. Your masterpassword is
then used for encryption and these passwords cannot be restored
without identical masterpassword. But the saved data should not give
you any chance to recover your masterpassword if you should ever
loose your device.
But how to transfer your computed password to your PC? You could
read it at the display and type it manually to the PC keyboard but
PasswordYeti also supports a virtual keyboard driver for windows
PCs. The Android app will send your login or your password to your
PC and the driver will type it for you wherever you've placed the
cursor. Of course the login, the password and other data are
encrypted before they are transferred from the Android app to your
The Android app will hold all the sites and the
corresponding logins. And you can assign an additional name to each
item, which is used in the main list and for alphabetical sorting.
When you start the app for the first time you will see an empty
screen, so you should invoke the Android menu button and select "Add
Item". In the following dialog enter all the settings needed for a
login. After you've finished the dialog using "OK" you will see the
first entry in your list and you can unfold this list entry by
In the folded state you can see the little cross for deleting the
In the unfolded state you have several choices:
- The play symbol next to the URL will send the URL to your PC.
If the PC receives a message of type URL it will invoke the
corresponding "open" command, so normally your default browser
should open this URL.
- The play symbol next to the Login will send your login to the
PC. If the PC receives a message of type Login it will call the
virtual keyboard and type the login at the current text cursor
position, just as if you would type it at your physical keyboard
at this moment. So place your text cursor into the text field
where you want to enter your login.
- The key symbol next to password shows the password as plain
text. If required you will be prompted to enter your master
password. Your master password is required for computing the
password used for this item or for decoding the password in case
you are using a classical password for this item.
- The play symbol next to Password will send the password to the
PC. If required you will be prompted to enter your master
password. If the PC receives a message of type Password it will
call the virtual keyboard and type the login at the current text
cursor position, so place your text cursor at the password input
field before invoking this command. If you have placed your text
cursor anywhere else i.e. inside a text editor, your password
will be visible, just as if you would type it manually.
- The double play symbol next to Login and Password will send
your login, followed by a tab character, followed by your
password, followed by a tab and a return character. For most
login pages this will work for a complete login at a single
click, if you place the text cursor at the login field.
When adding and editing items first you have to define the following
- Name: This value is only used for showing the item in the list
and for the alphabetical sorting of the list. It has no effect
on the computed password.
- URL: Here you can define the URL or even a link to a local
executable, which will be opened when sending the URL to the PC.
The URL is part of algorithm which computes the masterpassword,
so chaning the URL will also result in a different password when
using the masterpassword algorithm.
- Login: Her you should enter the login you are using at the
corresponding site or executable. The Login is part of algorithm
which computes the masterpassword, so chaning the Login will
also result in a different password when using the
- Use masterpassword: Check this option if you want PasswordYeti
to compute an invidiual password for this password. If you've
decided to use this option you have some more choices.
- Masterpassword type: This defines the length and complexity
of the password which will be computed. It varies from a long
password with special characters and numbers to a simple 4
digit pin code.
- Masterpassword count: If you need a new password for a
certain login (for example if the database of the provider has
been hacked), but you don't want to change any other option
like URL or Login, you can simply increase this counter.
- Use classic password: Check this option if you don't want to
use automatically computed passwords or you want to use alread
existing passwords. If you've decided to use this type of
password you have to enter it in the textbox and you have the
option to show the password as plain text.
The settings dialog offers the following options:
- The first edit field shows your local device name. This is
name is not editable. It is computed from some of your devices
properties and at startup PasswortYeti checks if it matches your
device to prevent that any other device can send commands
simulating your device.
- The remote device name is the name of the device where you
want to send your commands. Here you have to enter the device
name of the receiving PC
- You have three options how to handle the masterpassword:
- Request every time needed: You will be asked for your
masterpassword each time it is needed for computing an
individual password or for decoding a classical password.
- Request if not entered for more than 12 hours: If you have
entered your masterpassword once and you don't restart
PasswordYeti you will not be asked again.
- Save an restore from settings: You will never be asked for
your masterpassword, as it is saved and restored from the
settings. Of course your masterpassword is not save as plain
text. However this is the most unsecure option, as anybody
finding your device can also see or recompute your passwords.
If you nevertheless have decided to use this option you will
see an additional text field where you have to enter your
masterpassword. In addition you can toggle the text field to
show your edits as plain text or in password style.
If you want to use the feature of the virtual
keyboard and the URL opening, you have to install the PC application
and the driver which are combined in the installer, which can be
The application will start in hidden mode. To show it, you have to
click the corresponding item in the systray. At the moment, the PC
application just shows some logging of the latest events, which can
be helpful to detect some problems if receiving the messages from
the android app doesn't work.
If you want the application to start automatically with, you should
move or copy it to your autostart folder, or add a link to the
Download and install the Android application and the
PC driver and application. A demo version of the Android application
can be downloaded here
the full version of the Android application can be purchased in the
Google Play Store. The PC application and the driver are free and
can be downloaded here
After you've installed and started the corresponding driver and the
application, please go to the settings of the application to find
the device name of your PC. The application will start in hidden
mode, so you have to click PasswordYeti item in the systray to show
the application window.
To open the settings, click the icon in the upper left corner and
select the settings menu item.
You will find a device name for your pc in the settings of the
application and the device name of your android device in the
android app. Enter the device name of the PC in your android device
and the device name of your android device in the settings of the PC
Now it's possible to send the URL, the login and the password by
clicking corresponding buttons in your android app. These messages
will only be received from your PC if it either is in the same local
network as your android device, or if it is connected to the local
hotspot of your android device.
version at Google Play Store
Android demo application at Google Play Store
Android demo application as apk download
Virtual keyboard driver (Win 7/8/8.1, 32 and 64 bit)
This feature is not yet available. In the
future it will be possible to handle all your logins also at
the PC. Then it will be possible either to send these items to
another PC as you do from the Android app, or you just select
an entry and invoke the virtual keyboard by a background
shortcut and so you don't need any additional device.
Yetibuzu is a trademark of BeBetterOrganized
Tel. +49 (8051) 96323 42
Fax +49 (8051) 96323 43
Registernummer: HRB 16456
Die BeBetterOrganized GmbH wird vertreten durch die
Geschäftsführer: Barbara Freyberger und Johannes Freyberger
Umsatzsteuer-Identifikationsnummer gemäß § 27 a