The idea of a hardware password manager with id cards is very good, and this is a good attempt at a product.
However, it cannot deliver what it promises. At this time, it is a hardware dongle to be used with an installed application, which is not available for mobile devices.
Generally, I'd have liked to use the auto-type feature on my android devices as well as my PC with Qubes OS. Unfortunately, that feature is not really usable. It works only with basic ASCII characters, which is too big a limitation for secure passwords. None of my existing passwords are limited to simple ASCII, and weakening my passwords is not what I had in mind when I got this device. Extended ASCII would probably be enough to support all my current passwords, but this device is not capable of that. Also, it does not seem that the developer is still working on the device or firmware, my questions about improvements were deflected with hints to the "next device". Which would mean this is a mediocre device without support and no future updates.
My own attempts to extend the ASCII functions to extended ASCII were hindered by the total lack of documentation. The developer does answer some questions, but ultimately I was unable to figure out how to generate new keyboard layouts, and got no answer.

The best I can say about this project is that it is the best attempt at a trustworthy hardware password manager I have seen. But it is not good enough.

Is a hoax This circuit does not help increase the ability of CDM324, so it should be checked so as not to fool others.

Easy to setup and install and configure the browser plugin and software. Intuitive to use too! Very happy with this product.

On the Tindie service.

Delivery was from China although tindie order looks like it will ship from Switzerland easy mistake but product page is clear. Caveat emptor.

Very slow shipping. Extraordinarily slow including more than a week in the UK. One whole week spent processing customs.

I had to pay customs handling fees which were over twice the actual customs due!

On the device itself

It is drop dead gorgeous the OLED is beautiful crisp, clear, bright (even at 10%). The blue is just so vibrant. The animations as you scroll are oddly satisfying as is using the scroll wheel with lets you intuitively navigate the devices firmware. More on the scroll wheel later.

Due to issues with purchasing a Mooltipass (slow delivery, customs issues, expensive) some degree of vendor lock in. Requires you to buy another device (admittedly the cheapest compatible card readers seem to be about £15) to read the mooltipass cards to extract keys to decrypt your back up. Another issue is while the smart cards appear to be cut down from the normal credit card form factor, I can’t find any of these AT888SC102 in smart card form factor at quantities less than 100 units. That means I have to pay shipping to get hold of these otherwise normal cards from China (and presumably wait 3 weeks). I’ve not idea of the reason these particular cards were selected, there might be very good reason for it for all I know.

The wheel is intuitive to use but snap risk and seems to be the most likely point of failure for the device. Would 3 buttons be so awful? Or even 2 buttons like a ledger or even 3 buttons, it would make confirm and cancel more intuitive in my opinion.

The browser integration for the most part works very well. There are intolerable nag screens whenever a page is loaded without the mooltipass connected. Look to your OS settings to supress these notifications but those only seem to have been a temporary fix for me. The app does not allow you to make this change.


Using the device unaided works well.

It seems passwords are generated computer side before transfer to the device. This has pros and cons. A pro being increased entropy compared to on device alone. A con is that I trust the device more than I trust the computer. Overall though it doesn’t seem to make a security difference because passwords must be on the computer at some point to be useful (or you can’t log in!).

There are no on device password management features. To add a password you either have to do so through the desktop app like Moolticute (more on that later) or the browser plugs (more on that later too).

The 31 character password limit is unfortunate (for me) as all my pre-existing passwords are 32 characters long! I’ll have to be very sure of the Mooltipass before I move over passwords that I could not afford to lose. My Github password is 64. This was of course in hindsight overkill, but overkill without a draw back when my password manager allowed it!

I did accidently lock myself out of an account in the first day I had the Mooltipass (generated a password and forgot to save it!). So make sure you do some trial runs, maybe using new accounts to get the hang of the process.
The browser plugins are very helpful in reducing clicks on the device, however the notification with pop up noise every time the device isn’t plugged in it soul destroying, as is the notifications that the password is too long (even if you don’t want to save it to the device).
The password generate is clunky; you must go into settings to change characteristics and it does not ensure at least one character per category included so you might tick include numbers if the site requires it and it might not actually include a number (by random). Finally, as I said I did lock myself out more than once and that’s mostly my fault of course but why would I want to generate a new password and NOT save it?

Overall, I am very pleased with this device, it’s not perfect, far from it, but it works well and is head and shoulders ahead of the others. Did I mention just how gorgeous this device is? I like that it will work with any device unlike other hardware password managers and allows easy navigation of logins on the device. I do think improving the plugin will be low hanging fruit and this would improve the experience immensely.

Very clever device. Much more reassuring method than storing passwords on the computer, even if they're within a password manager. Congratulations to all involved in getting this finished and released!

The plus point of this product is a very good product. the negative point of the product is the encoder wheel in the long run I think there will be problems. I will definitely buy a second one to transform it and put it inside my computer laptop
to eliminate the USB cable . ( I will tell my friends to buy this product )

The idea is great. A card with PIN-code, and a hardwaretool that emulates a keyboard.
There is only one slight problem: The scroll-wheel. I am afraid, soon this tiny piece of hardware stops working.
Improve this.

This is a great little hardware password manager, very secure and well designed. The access card is great, no card no password plus you need to know the pin which is 4 Hexadecimal digits.

The Chrome and Firefox integration are fairly good, they do miss some states but overall good. For IE and Edge as well as other logins it's easy to select the site from the hardware menu. The Open Source gives me great confidence that there are no back doors, plus I can recompile from the source code if I'm really paranoid.

For the weakness, first I'm a software developer and this isn't my first hardware password manager so understand I'm being critical from the point of view of someone who knows what is possible.
- The scroll wheel isn't great as the only input device, there is no way to back-up if you make an error entering your pin and you only get 3 chances.
- The lack of internal battery is an issue if your phone doesn't support OTG.
- This would benefit from Bluetooth as plugging in to your phone isn't a great way to do it, secure wireless over Bluetooth would solve that.
- A fingerprint reader would be a nice option for unlocking as that scroll wheel gets old very fast.

That being said I'm looking to purchase a second one so I can keep one at home and one at work, no more forgetting it.

Spend the extra cash to get 5 or 10 extra cards and keep one or two clones because once you forget your pin code 3 times the card is killed and you can only throw it in the bin.

I don't trust software password managers and this is the best H/W password manager I've used that is available today so I'll keep using it and update the firmware as improvements are made.

Recommended for everyone that is at least moderately comfortable with technology Hardware and software.

Not quite sure if this is the tool for my needs. I am a novice when it comes to setting up apps and such. Was not as easy as I anticipated from the online video. I wanted something offline and one of the first steps was to download an app. Haven't had a chance to work through it yet or figure out how to use it on devices other than my home computer. The small cable end of the cord seems fragile.

Purchased one to try out.
Really easy to use, like that you can use without browser extension so you know credentials are local to the device, and no issues of being "out there" as some fear. No more spreadsheets with passwords!

Had an issue with exporting the database, super quick response from Mathieu, and after further testing, located a bug, which will be reviewed in future software updates with Moolticute app. Very impressed, the product and the service are at the same level of awesomeness!

Keep it up Mathieu, definitely a follower here in Australia!


Michael

The first shock was when I used package tracker to discover the product is made in China. I do not want a password security device that is made in China. Secondly web browser support is really poor and neither MS Edge or IE are supported. Finally the documentation is poorly written and imprecise. I have decided that the only place for this is the bin.

Super good password manager.
Couldn't recommend this enough; it's really easy to use, and super secure.
Will buy upgrade to any subsequent versions.
My only criticisms are that before I realised how this product works I accidentally nuked one of my pass cards; I thought the cards have the database on them, but they actually have the private key, so when I tried to update the database on the key it broke, lol.
Luckily I have 4, so it doesn't matter.
Will probably buy more cards to be safe (definitely get extra cards in case you lose them), might even buy another mooltipass, although I don't know how easy it is to back up the database on a second device, might be more work than I can be bothered with.

SUPPORT QUALITY OPEN SOURCE DEVICES LIKE THIS ONE

Overall the product is good but can have more improvement in the future. If the next generation of Mooltipass can include an administrator account to manage all this smartcard for on-boarding and off-boarding process. Then, this product will be for suitable to be used in corporate usage.

Ich habe nach einer sicheren Lösung Passwörter zu speichern gesucht. Ich wollte keine Kompromisse eingehen und weder die Passwörter auf dem PC noch online in irgend einer Cloud speichern. So habe ich schließlich Mooltipass gefunden. Die Hardware ist gut verarbeitet, der Display gut lesbar und das Karten-Wechselsystem sehr durchdacht. An der Software wird mit ständigen Updates und Verbesserungen gearbeitet. Das freut mich als Kunde und macht Hoffnung, dass das Produkt irgendwann alle meine Wünsche abdecken kann.

Leider gibt es etwas was mich an dem Produkt was mich stört und ich deshalb nicht 5/5 Sterne vergeben kann. Es ist die Passwortzeichenbeschränkung auf 31 Zeichen. Ich hatte das Gerät hauptsächlich gekauft um meine Steemit-Passwörter abzuspeichern. Diese sind so lange wie sie sind und das kann ich leider nicht ändern. Hier ein Beispiel: STM5X1X9dYZZKUa4tWsELShXXTZoJbg3jui2NRDBr6fJ8yS6pFxDD

Mir ist durchaus bewusst, dass für die Sicherheit alleine 31 Zeichen reichen würden. Jedoch würde ich es als Chance sehen, wenn in Zukunft grössere Passwörter möglich sein würden. Dadurch wird natürlich auch Speicherplatz auf dem Gerät verloren gehen und je nach Speichereinteilung/Programmierung ist es ein grosser Aufwand diese Funktion zu implementieren. Vielleicht kann ja der Benutzer selber wählen wie grosse Passwörter er haben möchten unter dem Punkt „Einstellungen“ dann muss er halt insgesamt mit weniger Passwörter auskommen. Ich würde mich aber sehr darüber freuen 

Trotzdem ist es ein Top Produkt und ein grosses Lob an den Entwickler / das Entwicklerteam.

------------------
I have been looking for a secure solution to store passwords. I didn't want to compromise and neither store the passwords on the PC nor online in any cloud. So I finally found Mooltipass. The hardware is well processed, the display is easy to read and the card changing system is very well thought out. The software is constantly being updated and improved. This pleases me as a customer and gives me hope that the product will be able to cover all my wishes at some point.

Unfortunately there is something about the product that bothers me and I can't give out 5/5 stars. It is the password character restriction to 31 characters. I mainly bought the device to store my Steemit passwords. These are as long as they are and unfortunately I cannot change that. Here is an example: STM5X1X9dYZZKUa4tWsELShXXTZoJbg3jui2NRDBr6fJ8yS6pFxDD

I am well aware that 31 characters alone would be enough for security. However, I would see it as an opportunity if larger passwords would be possible in the future. This will of course also result in a loss of memory space on the device and depending on the memory allocation/programming it will be a great effort to implement this function. Maybe the user can choose himself how big passwords he would like to have under the point "Settings" then he has to get along with less passwords. But I would be very happy about that :)

Nevertheless it is a top product and a big praise to the developer / developer team.

Translated with www.DeepL.com/Translator

Needed a password vault more than an active password manager, but was attracted to the promise of automation and better security offered.

The usage protocols required to load passwords (or change them) are well thought out, but a bit cumbersome. Other devices would be the same in this regard.
The hardware and included cable are of high quality - though my error rate on entering my pin with the thumbwheel is about 10 percent.

The software (MooltiCute) is a good balance between function and complexity. Too bad it crashes the first time I use it on a freshly booted computer (MAC Mini).
Second attempts to restart MooltiCute fail unless the dead app is killed from the command-line. The software is very good about keeping you secure and does not let you do bad things that might compromise security. (I would have liked a way to export an ASCII representation, but understand reasons for not allowing it. (Third party scripts seem available though.)

Security is inconvenient. I will continue to use the very fine Mooltipass Mini, although I don't think I will gift the spare I purchased to a less patient friend :-) ..

I've received my Device relatively quickly considering where it came. It was packed extremely well which was a relief.
Setting it up was pretty straightforward as the Company has a dedicated page for its setup. I will say this read everything on the website on the setup page, so you understand the operation of your device. It came with a long cord which was a nice touch so it could be placed out of the way while working. And it works as promised, it gives you the option to use a password of your own or it can generate a strong password for better protection. Overall I'm extremely pleased with this device. Also before I made the purchase I had some questions about certain things and the Owner answered my questions without hesitation which put my mind at ease. The decision was pretty easy after that.
I recommend this device to anyone who has to remember or have numerous passwords.

So I purchased this device after trying similar products in this category. After using the mooltipass, it is hands down the best device in the offline password category.

I have since migrated all creds and private ssh keys to device. Although not a 2fa device, the request to approve login makes it feel as such.

The only annoyance is in attempting to use this device with a cellphone. One would have to scroll through the list of creds to use. Although the list can be reduced by using favorites, I still find that this experience can be improved.

Overall I do recommend this product. It works very well, the user experience is smooth (browser plugins). In addition, users can create extremely complex passwords without the fear of forgetting.

One last thing, the device does offer the ability to store files.

Hopefully this helps.

Mooltipass is a great product. I bought a second one after trying out one. I mainly use it for my most sensitive and less frequently used passwords for maximum security. For less sensitive passwords, I use a software password manager for convenience - the convenience is especially helpful for mobile devices. The combination of the two works really well for me.

The design is clear, the tool is simple, I didn't have to read the documentation. Everything is simple.

After using it for about 2 weeks now, I really love my Mooltipass!

Great software infrastructure
- "Knocking to enter" is a great gimmick!
- Charmingly os agnostic, transparent approach (Mooltipass acts as a keyboard).
- Windows components (browser add-in, Moolticute hardware "driver" app) are installable by the user, without admin privileges.
- Data backups and duplication of cards and devices are thoroughly supported.

Hardware shortcomings
- Wheel acts erratic, number on display sometimes rolls in the opposite direction of wheel movement or even jumps 1-2 notches further (as a result, it takes much longer to dial 4 digits than to input a 12 digit password via keyboard, this leads to an inclination to not using the device).
- Card size is "off", a card at standard credit card size would be advantageous, with a hole to attach a key ring/card strap/lanyard.

Not ready for corporate deployment (yet - these can be fixed via software)
- Option to install a protected Windows logon (via GINA.DLL) is missing.
- No fixed link between registered active directory user and specific Mooltipass device is possible.

Wishlist
- Device should be usable as an "offline" lookup tool, to completely replace my spreadsheet password and PIN "database" (or: full-size password manager like KeePass). I'd like to be able to specify if I want the password to be entered or to be displayed.
- A battery supported device option would be a welcomed next step ...

All in all a great Product. Simple and efficient, the interface is well designed and I can't complain about anything to do with the Mooltipass itself. The Software is great too however the newest version doesn't support my older operating system (which is OSX 10.10.5) which is annoying. The shipping is very pricy and seems too high when compared to other products I have ordered from China. But apart from that nothing to complain.

I will buy the mooltipass again and again, another one for traveling as well as some presents for family and friends. Before I used the keepass app and it was already much nicer than keeping lists of passwords on paper or in manually encrypted files.
The mooltipass has a few big advantages over everything else I used or saw before:
- Open Hardware (obviously I wouldn't want to trust my credentials to other hardware anymore which uses e.g. intel processors that may potentially leak every trusted bit of information via exploitation of stuff like ME, AMT or various flaws like spectre, meltdown etc.)
- Extra device only for this concern (doing all on one device makes you incredibly dependent on that and if you lose it or it's stolen everything is a really big mess)
- Ease of use (I thought keepass was easy but mooltipass is really astonishing simple)

These are just some good reasons to buy this. Another one is that I like the idea of open source / hardware business and would rather support this project instead of buying a cheaper and not really trust-worthy alternative from some big company that I don't trust. I wouldn't just buy the mooltipass to support it - this is just a good side effect.

Used the mooltipass for 2 weeks now and have really enjoyed using it to keep things more secure. It's very easy to use, looks sleek, functions great. I guess the only concern I have is that I'll wear out the scroll wheel from clicking it, but not worried about that now. I'd definitely consider buying a backup and maybe encourage friends/family to consider using it to make their information more secure.

The mooltipass is easy to use and well built. The housing is made of metal and has a nice oled display. Great product.

So, I was basically looking for better password managers online, been getting fed up with LastPass for a good while now and KeePass is extremely slow and requires too much manual labour to operate it. I wanted some smoother experience without the hacks involved. And since my activity usually low risk since I don't download that much things, I thought a hardware based solution would be amazing, but I didn't find anything interesting in the beginning. But then my friend told me about the product he came across but he was reluctant to buy, but I looked at the documentation and stuff associated with the product and I was quite blown away. I tried other password managers like Myki, but I was quite astonished how easily a government entity could spoof my telephone number and take over my password data without my permission, and they can actually do it! While I was actually looking around I figured out these are not really good solution and I finally decided about giving the Mooltipass a try.

And I have to say this hits the spot. Except the shipping.

The Moolticute app itself is very handy, I managed to put some handy files onto the device already, logging into the device with the Mooltipass is as easy as a breeze, in comparison to the Ledger Nano S, this thing takes less time to get into the main interface, although I didn't get to try out the Trezor Model T yet, I suspect it takes lot less touching or clicking to get into the password manager. Also to note, the Nano S's passwords are deterministic and have different settings under what deterministic passwords appear based on the title that is given for each entry which determines the character combination based on the master seed. I'd love to see something similar in this. Although those passwords are much shorter 20 characters long only, which is not quite feasible in my opinion. Although they contain a lot more different types of characters with full ASCII and other encoding support.

The Mooltipass is a clear winner here. I actually started changing my passwords now on goonfleet.com, logging in via the device is a lot easier task now and even getting into EVE's main application without having to save the password unsecurely on the local drive.

I did take a me a bit of time to figure out how to use it with Android, because the password didn't want to work properly until I figured out I can change the keyboard layout in the settings on Android when the HID- connected sign is in the status bar. It's really good, also (I suspect) it can detect it is running a different operating system because on Android the typing is a lot slower but still accurate, managed to log into amazon with it just fine. Also I was thinking that a micro-to-micro short cable would be included but it wasn't so I kinda felt let down with that. Also the fact that USB-C is not supported, is quite weird, should have been in the first place! But still good, perhaps in a new Mooltipass in the future.

I gave the product 5 starts because it is so epic, with the documentation and the communication same 5 stars, Limpkin is pretty fast with replies. I was quite generous with the shipping giving it 3 starts, only because the Mooltipass arrived unharmed. xD I saw some horror stories about it never arriving or screen being wonky (mine doesn't even rattle, although I must admit I did try and shake it a bit to see if it does it xD) or the wheel broken on arrival, phew, must be a nightmare with the 4-5 week long wait time. If you order this, you better forget about it for quite some time, because I was literally stalking the DHL shipping page constantly for the past 2 weeks, drove me nuts. xD The device took 5 weeks to arrive, also it been in the country of destination (Hungary), I do know our postal service is a nightmare shouldn't be blaming DHL for it, but I'm happy that it arrived unexpectedly today!

Hopefully now that I have the Mooltipass my friend will also consider getting one or two for himself also! :D Thanks for the amazing product!

Overall ignore the stars on top, it is 5 out of 5.

I'm already using this product for a while (bought 2 for my wife and myself) and can only say it's AMAZING. Previously I was using 1password but then realized that storing passwords in the cloud is not secure and I had a lot of problems with their plugins so that had to unlock the main app to copy passwords and paste on the website every time. All these issues are now gone with Mooltipass Mini which is much easier to use. I'm using it on the computer and with IPhone (which requires Mooltipass to be adjusted a little bit: set "wait 5 ms after each keypress" in Moolticute app). The screen is very contrast, pretty big and very easy to read. Scrolling wheel feels awesome and very fast. Authentication on the websites is immediate, Mooltipass understands where to type login and password (which could be overridden for non-standard websites) and does all this job.

The concept of the card is awesome and adds security. Everything can be adjusted/customized, there are a lot of useful settings in Moolticute. Passwords backups to binary files is also possible. The product is designed by extremely smart and talanted people. Thank you!

I've used this device for nearly a year now.
Saving and using passwords is working like a charm with the browser plugin and moolticute.

I'm using moolticute for quite a while now and it's doing a nice job so far.
Sure, it's far from beeing finished (at least I hope it is) but there's one thing I'm missing most:
I'd like to have an option to modify the service/site name to change an IP-Adress or URL without the need to re-add the entry.

That beeing said I'm staying tuned for future updates.

P.S.:
I'm still not able to view themooltipass.com from my location.

Lets start with the exterior first, housing is really good.

The wheel button, I like hardware buttons, however after two weeks, it starts to get a slightly loosely (not a problem yet).

The screen, the screen doesnt get darker than 20% in moolticute, so you need to be careful, that noone is watching you from behind. Would be nice if it could get darker. At 20% its still very bright.

Software, I only used the app moolticute. I cant comment yet on the browser extensions yet.
The biggest downside from my point of view, to enter new data into the mooltipass, you need software. Without installing additional software like moolticute or other browser extensions, [at this moment] the mooltipass is basically useless.
I would have been nice if you could use the mooltipass without additional software to manage your [creating new] credentials.

Support gives quick responses, but currently emails to request a password to verify that the device was not tempered doesn't get answered anymore.
The process of... Well actually the attempt to verify a user by asking the user details is flawed, hopefully a better process can be put into place. In github i created a pull request [got merged], hopefully instead of asking someone's address information, only a tindie order number should be enough.

Overall feeling, positive. Arbitrary pointing, 6.5 out of 8.
Would I be buying another one? Probably not [unless you can manage everything from the mooltipass itself].
Would I recommend it to other people, probably yes, until I see something better on the road.

Very easy to setup when you follow all the steps of tutorial.

Well design, solid made and easy to use.

Shipping is quiet slow.

Exactly what I was searching for!

Pros:
-small
-pretty secure (to the best of my knowledge)
-easy to use (and snappy as hell)
-works on all devices which support usb keyboards (tested on an Android Phone and a PS4)

Cons:
-I'll have to get a second one as backup, because I'm not able to access my credentials when the device is broken or missing
-Export/Import for keepass etc. would be great
-It would be handy to be able to change the keyboard layout from the devices settings menu (perhaps from a list of favorites which is defined in the desktop app)
-nothing else, I love it

It is simple to configure and easy to use, it is well documented and the support is spectacular, it is definitely a good investment.

Getting started was slow not much in product orientation. It can be confusing, but once i figured the details out i love it.
already paying off for me.

Originally I bought two to see how this thing works. Now after some months I bought plenty more to have one everywhere. In office, in travel office set, in travel hotel set, to carry on, home etc.etc. And I stopped and cleared my contracts with all the cloud services managing my passwords. Never felt more secure than now!

I received my mooltipass today. I'm extremely happy with it. The packaging was professional and the unit is solid. It feels good in your hand and its easy to use. This is a quality product. My only negative critique is how long it took to get to me which can be blamed on overseas shipping. I will most likely be ordering some more of these.