Would We Buy One? Probably Not
Passwords are imperfect. They depend on people to secure and update them regularly. However, tools like the Mandylion password manager help administrators ensure that users comply with password security policies by making it as easy as possible.

Users must change passwords on their own, so this device is very much human dependent. But users who make Mandylion’s solution a part of their routine will benefit from its strong password-generation capabilities and security safeguards. The Mandylion token could also be an invaluable tool for users in extremely sensitive environments with large numbers of log-in records. However, average users—or users with 10 or fewer regularly used passwords, like us—may be better off sticking with the good old-fashioned memory found inside your head.

Empty Mandylion Policy Master Template

The problems we encountered seemed to stem from the software’s advanced features. Users who are simply handed a preconfigured token (with all editing functions locked) will find the token very simple to use, if a bit frustrating to navigate. However, administrators working with group templates may consider the Policy Master unwieldy.

Overall, we were impressed with the “defense-in-depth” approach to password security that Mandylion’s password manager affords. However, we encountered enough issues with unintended password regeneration and editing that we would be hesitant to rely solely on the token for our authentication needs.

About Mandylion’s Password Manager

Mandylion Labs

Price:
Single-user token/cradle and Policy Master software, $49.95. Prices lower in bulk; industrial-strength cradles to configure hundreds of tokens at a time go for $269.

Pros:
Extremely secure; security safeguards are amazingly customizable.

Cons:
Policy Master software is a bit unwieldy. Does not allow you to modify manually entered passwords using the token’s buttons.

Bottom line:
Enterprises with password policies that demand the highest level of security will appreciate the Mandylion password manager’s password-generation capabilities, as well as its fully customizable password parameters and security safeguards, but companies with less strict policies or those that need only a few strong passwords for sensitive systems or sites will save time and effort using traditional methods to generate and remember passwords.