Skip to content

Services, Wiki-Artikel und Blog-Beiträge durchsuchen

↑↓NavigierenEnterÖffnenESCSchließen
NFC password card - That's how secure the new password manager is!
Security Awareness

NFC password card - That's how secure the new password manager is!

With the NFC password card there is a new kind of password manager. We have taken a closer look at this variant!

Chris Wojzechowski Chris Wojzechowski Geschäftsführender Gesellschafter
Updated: October 2, 2024 4 min read read
IT-Grundschutz-Praktiker (TÜV) IT Risk Manager (DGI) § 8a BSIG Prüfverfahrenskompetenz Ausbilderprüfung (IHK)

TL;DR

The NFC password card is a physical card that stores passwords locally, readable only by a paired smartphone after entering a master password. Key advantages include immunity to smartphone theft, a signal-blocking card cover, and simplicity for first-time password manager users. Drawbacks include limited storage - around 20 passwords in practice despite the claimed 50 - and the inability to transfer the card to a new Android phone. At around EUR 20, it suits password management beginners, but lacks the generation features of traditional password managers.

Table of Contents (3 sections)

Password managers are a very good way to manage passwords and ensure that different passwords can be used on different websites. There is a new method of a password manager and that is an NFC password card.

NFC password card instead of password manager

We have already reported about Password Manager in the Sevencast as well as in past blog posts. To protect various accounts with good and secure passwords, the use of a password manager is highly recommended. In the world of password managers there are two different categories, the offline and the online managers. There are both advantages and disadvantages for both categories. The most obvious advantage of the offline version is that all passwords are not stored in a cloud, but only on the local device. The advantage of the online variant, on the other hand, is that this manager requires little maintenance. If I change a password in my account, it is automatically updated on all devices on which I use the password manager. The password card, which communicates via NFC (Near Field Communication), is a kind of password manager, which can be assigned to the offline variant. The biggest difference between the NFC password card and a "normal" password manager is the fact that the password card is a physical card. On a normal card, passwords are stored and can be read by a smartphone after the master password is entered. The password card is configured by an app that is available for free for both iOS and Android. Passwords can be stored on the card by the app, but first the master password must be set, which is needed to unlock the card. The classic password manager is only virtual on a computer and is also secured by a master password.

The NFC-password card in the case (source: heise.de)

Advantages of the NFC password card

A big advantage of the NFC password card is the fact that the passwords are actually stored on the card. This means that the passwords cannot be stolen if a stranger steals the smartphone. Since this card now contains all passwords, the user obviously cannot lose them. In case the card is lost, a replacement card is included in the delivery. Another advantage is the card cover, which is also included in the delivery. The cover is not only a protection for the NFC password card, but the signals of the card b remain within the map. This makes it impossible for attackers near the radio to access data, since the card cover blocks all signals. The last point, which can be interpreted as both an advantage and a disadvantage, is that the NFC password card has very few functions. For newcomers who have not used a password manager before, this is an advantage because the use of the password card is very simple and clear, due to the limited functions.

Disadvantages compared to the classic password manager

Besides the advantages already mentioned, there are also some disadvantages that need to be mentioned when dealing with the NFC password card. A big disadvantage is the very limited memory space on the password card. The manufacturer states that about 50 passwords can be stored. However, reporters from heise.de have found in an experiment that only about 20 passwords can be stored if they are written on average and of average length. 20 passwords are definitely enough for some people, especially for those who use a password manager for the first time, but 20 stored accesses are too little storage space if the card is used for a long time. Besides the storage space, the loss of cell phone is a big problem. As already mentioned, passwords are not stolen when a cell phone is stolen, but the NFC password card can only be unlocked with the appropriate cell phone. So if you lose your cell phone, neither the thief nor yourself can access the passwords. A similar problem arises if you want to pair the password card with a new smartphone. For iOS there is now a solution if you have access to the old smartphone. For Android, on the other hand, there is still no way to "move" to a new smartphone. Basically we recommend an NFC password card to those who are new to password management. For about 20€ you get the password cards and can thus secure your accesses. Those who already use a password manager will miss some functions, including the generation of secure passwords.

Next Step

Our certified security experts will advise you on the topics covered in this article — free and without obligation.

Free · 30 minutes · No obligation

Share this article

About the author

About the Author

Chris Wojzechowski
Chris Wojzechowski

Geschäftsführender Gesellschafter

E-Mail

Geschäftsführender Gesellschafter der AWARE7 GmbH mit langjähriger Expertise in Informationssicherheit, Penetrationstesting und IT-Risikomanagement. Absolvent des Masterstudiengangs Internet-Sicherheit an der Westfälischen Hochschule (if(is), Prof. Norbert Pohlmann). Bestseller-Autor im Wiley-VCH Verlag und Lehrbeauftragter der ASW-Akademie. Einschätzungen zu Cybersecurity und digitaler Souveränität erschienen u.a. in Welt am Sonntag, WDR, Deutschlandfunk und Handelsblatt.

10 Publikationen
  • Einsatz von elektronischer Verschlüsselung - Hemmnisse für die Wirtschaft (2018)
  • Kompass IT-Verschlüsselung - Orientierungshilfen für KMU (2018)
  • IT Security Day 2025 - Live Hacking: KI in der Cybersicherheit (2025)
  • Live Hacking - Credential Stuffing: Finanzrisiken jenseits Ransomware (2025)
  • Keynote: Live Hacking Show - Ein Blick in die Welt der Cyberkriminalität (2025)
  • Analyse von Angriffsflächen bei Shared-Hosting-Anbietern (2024)
  • Gänsehaut garantiert: Die schaurigsten Funde aus dem Leben eines Pentesters (2022)
  • IT Security Zertifizierungen - CISSP, T.I.S.P. & Co (Live-Webinar) (2023)
  • Sicherheitsforum Online-Banking - Live Hacking (2021)
  • Nipster im Netz und das Ende der Kreidezeit (2017)
IT-Grundschutz-Praktiker (TÜV) IT Risk Manager (DGI) § 8a BSIG Prüfverfahrenskompetenz Ausbilderprüfung (IHK)
Certified ISO 27001ISO 9001AZAV