RoboForm Pro - It Just Works

For $30, I got what I expected from a web password manager and form-filler application.

What's Not:&nbsp

The free version of RoboForm provides a lot of the same functionality as RoboForm Pro--prospective users should try the free version to see if it covers their needs before spending $30 on RoboForm Pro.

RoboForm starts the setup process by explaining its core functions and the terminology (passcard, identity, safenote) for those functions. After I finished the install, RoboForm asked for a master password (not required), and then opened the web browser to a tutorial.

What's Not:&nbsp

If you have a registration code, RoboForm does not ask for it at setup time. You must navigate to a web page later on to activate the product. It would be more streamlined if RoboForm offered to let me activate the product after installing it; this may be confusing to users who paid for the product, yet don’t see the extended functionality in the Pro version.

RoboForm is very easy to use. It will auto-detect when you enter a login for a website, and offer to save it. Logging into the website the next time is as simple as selecting it from a list, or using search if you are managing a lot of logins. Auto-filling a form is as simple as clicking a button.

One extremely useful aspect of the RoboForm user experience is the integrated help, which is discussed in more detail in the Help section below.

What's Not:&nbsp

RoboForm takes up a lot of space in the browser toolbar. I would prefer to be able to turn off some of the less frequently used buttons to reduce the amount of space it takes. If you don’t use other toolbars or browser plugins, this will likely not be an issue for you, but if you do, space can get crowded.

RoboForm allows you to put in a lot of identity-related information if you choose. The available fields are very comprehensive, and I never ran across a case where a field was not available. If you do, RoboForm allows you to define a number of custom fields. To do this, however, you will have to understand how web forms work, as RoboForm requires you to put in the HTML form field identifier so that it can automatically map the field.

During my tests, RoboForm did an excellent job of automatically saving account information when I logged into websites such as Yahoo, MSN, American Express, and Costco. It also did an excellent job of filling in address and credit card information from a sampling of eCommerce sites.

RoboForm provides good browser integration--I never had to leave the browser to do what I wanted to do. It provides search functionality, which works as you type, making it easy to locate specific items such as a login or an identity from which to fill forms. Coupled with RoboForm's ability to navigate to a site and in one step log you in, this search functionality is very handy.

For websites with multiple domains (for example, Citibank has citi.com and citibank.com), you can define those sites' names in RoboForm as the same. RoboForm will then recognize the different sites as the same, so you don’t get stuck setting up your account information multiple times. RoboForm also comes with many website equivalencies predefined.

RoboForm supports multiple encryption methods, and correctly chooses AES as its default method. It also provides support for employee/supervisor passwords, giving employees access to use passcards, but not to view or edit them.

What's Not:&nbsp

There are a few aspects of RoboForm's security that concern me. First, RoboForm does not tell me (nor allow me to choose) the keylength for the algorithm I have chosen. No matter how technically good an algorithm is, it is only as good as the given key.

Additionally, RoboForm does not appear to use the cryptography algorithms provided by Windows and instead uses its own implementation. I would have a higher level of trust in the effectiveness of the encryption if it used the functions provided by Windows.

Overall, though, what RoboForm provides is good for a home user; businesses, however, may require a stronger guarantee that security is implemented correctly.

On the privacy front, RoboForm asked me for some personal information during registration, such as my email address, but didn’t tell me why it was gathering this data; nor did it offer information on Siber Systems' policy for disclosing this information to third parties. The addition of a privacy policy would let me know what Siber Systems intends to do, if anything, with my data.

The help in RoboForm is very good. Not only are there full guides available online (which open as soon as you install the product), but every feature has context-sensitive help that pops up when you use it. This makes it easy to use, as there is no rummaging around in help files to figure out how a feature works. Once you are familiar with how RoboForm works, you can tell it not to show you a particular help box in the future. Nice.

Every item in RoboForm's options menu also has context-sensitive help accessible from a little "?" button in the dialog box. In all cases the help text is clear and meaningful.