For as long as I can remember, Windows has relied on passwords for security. And for as long as I can remember, passwords have been a pain. Keep them short and they're easy to crack. Too long or complicated and you'll spend most of your time re-setting them, simply because most users can't remember long, random, character strings. Especially now, given the ever growing number we have to keep in our heads: one for the PC, another for the Intranet, Web mail and so on.

So why not store all your passwords inside one of those clever chips like the ones used on chip and PIN credit cards? Well you can, if you buy a Digipass Smart Pack, an affordable smart card password management solution from one of the leaders in this area, Vasco.

Designed specifically to be used with Windows, the Smart Pack comprises a couple of USB card readers, the smart cards themselves and client software, which can be installed on any PC running either XP Professional or Windows 2000.

The smart card reader is installed first. Plug it into an XP PC and the drivers are loaded automatically, while on Windows 2000 it's just a matter of directing the new hardware wizard to search for them. After that you just have to run the client setup program and re-boot.

You can still logon to the PC normally at this point, although the usual logon screen will have been replaced by one from Vasco. You can then initialise a smart card, a simple matter of popping it into the reader and telling another wizard the PIN code you want to use.

Of course Windows still wants you to logon using a user name and password, so the next step is to store those credentials on the smart card too, using the management software provided. You can also force Windows to stop accepting manual logons if you want, and lock the PC or logoff automatically whenever the card is removed.

And that's about all there is to it. The next time you start your PC, just insert the card, type in your PIN code and the Vasco software will do the rest, telling Windows who you are, your domain, the password to logon with and so on. Moreover, special applets running in the taskbar will learn how you logon to other applications, Web sites and terminal servers and store that information on the card too, replaying it automatically every time you visit.

Digital certificates can also be stored on the card and used either for authentication or to encrypt and digitally sign e-mails and other documents. However, you can't use stored certificates for both purposes and we did find the setup and management involved a little complicated compared to that required for passwords.

Basic passwords, though, are very easy to administer, and on a large network can even be managed remotely, with tools available to learn logon routines, change passwords and re-set forgotten PIN codes. An evaluation kit for two users costs £100 + VAT, with additional licences, card readers and smart cards at similar prices or less, depending on the number ordered.

Unfortunately users still have to remember a PIN code, but only the one, and if you're spending all your time re-setting passwords the Digipass Smart Pack could be just what you've been waiting for.

An affordable and secure way of storing and using passwords on smart cards, the Digipass Smart Pack is great for small companies concerned about security, especially those with lots of passwords to manage. It offers automatic two-factor sign-on to Windows, Web sites and other applications. All users have to remember is a PIN code, the Vasco software doing the rest, even logging off when the card is removed.