<part 1>
- show a credential set as a card: show login: myemail@dress.com password: mypassword
- background voice: “login and passwords are an integral part of our daily lives”
- transform this card to a red colored key
- background voice: “they are what prevent malicious users from doing harmful things with our personal data”
- show several screens with different websites: ebay.com / gmail.com / unsecure.com
- have the red key open (like a door) the three websites >> the user can access his user accounts
- background voice: "people tend to use the same credentials for the different websites they visit"
- have an attacker crack open the unsecure.com website and steal all the different colored keys
- background voice: "however, recent news has taught us that credentials stored by websites are compromised on a daily basis, which means that once an attacker gets your credential set he can use it on other websites"
- have the attacker use the red colored key to open the 2 remaining screens (maybe have them “send” an email pretending to be from the original person with malicious intent, e.g. phishing their contacts or sending spam)
- background voice: “this is why using different passwords for different websites is important”
<part 2>
- show a computer
- show a guy attempting 3 times to enter a password
- show him clicking forgot your password … option
- background voice: "Remembering many different passwords is difficult, and one option is software based password keepers"
- show on the computer screen a vault
- background voice: "Essentially, they store an encrypted credentials database on your computer."
- show on the computer screen a green key with a text on top of it “masterpassword”
- background voice: "to unlock this database, you would enter a passphrase"
- show an attacker take in one hand the key, and in the other the vault
- background voice: "which means that at some point, both your passphrase and database must be stored in your computer or smartphone's memory"
- show the attacker use the key to open the vault
- background voice: "therefore, a malicious program could gain access to both and compromise all your passwords at once without you knowing it"
<part 3>
- show the mooltipass, connected via USB to a computer
- background voice: "to solve this problem, we introduce the mooltipass, an offline password keeper aimed at saving and encrypting your passwords in a more secure manner"
- show a vault on top of the mooltipass
- show a smartcard, with a green key on top of it
- background voice: "the main device contains your encrypted passwords, while a secure smartcard and a PIN code allows their decryption.”
- show the smartcard plug into the mooltipass, the user enters his pin and the vault opens
- background voice: “even if an attacker gets hold of your encrypted database or smartcard it is completely useless without your personal code”
- show the user press a “copy” button that clones the smart card and sends the vault to the computer
- background voice: “and don’t worry, we implemented the possibility to make backup copies of your credential database and smartcard without compromising your system’s security"
- show 0s and 1s on the mooltipass
- background voice: “As opposed to software based solutions, the Mooltipass only runs our tested code. independently of your computer - this means viruses or malicious programs cannot compromise your credential database and/or PIN, neither of which are directly accessible from the computer. ”
- have the mooltipass opened, showing some chips
- Magnifying glass zooms in on chips, reveals snippet of source code
- background voice: “Furthermore our product is open source, allowing you to make sure that your credentials are only kept inside the device and not leaked to the outside”
- have the mooltipass put together, with the computer screen showing the login page of ebay.com and the user approving the credentials sending
- background voice: “and with mooltipass, you can be sure that your credentials are only in the computer’s memory when needed and when you explicitly permit the mooltipass to send them. ”
- (real life video): show a complete use case: the user inserts his smart card, his pin, goes to ebay and successfully login.
- BG Voice: Not only are your passwords more secure, but the smartcard approach employed by the mooltipass allows for multiple users, each with their own smartcard and PIN… It can also behave like a keyboard so it will work with a wide range of operating systems and devices.
----------------------------------------------------------------------------------------------------------------------------------------------------