Documentation

Cipherpod User Manual

What’s in the Box

  • Cipherpod device
  • USB-C cable
  • Quick start guide
  • A pair of same-keyed RFID fobs for a keychain, one for backup and one for daily use

Note: Your Cipherpod does not require software installation or internet connection to operate.

Getting Started

Note: A Cipherpod is not an OTP generator, FIDO2 or password managing device, nor does it store any data. It takes something easy for people and turns it into something hard for attackers.

First Time Setup

  1. Connect the Device
    • Open Notepad (MS Windows) or another text editor
    • Plug the USB-C cable into your Cipherpod
    • Connect the other end to your computer’s USB port
    • The device will power on automatically
    • Wait for the Power On Self Test (POST) to complete
  2. Type your PIN into the keypad
  3. Touch the RFID key fob to the bottom of the device
  4. Watch a password appear in your text editor – you now see the device is working
    • Use the included sample card, or use any RFID-enabled device you already carry (building access, transit card, even a credit card! Note that credit card data itself is never copied, only the serial number which cannot be used to conduct transactions).
    • The card’s unique number becomes part of your password generation
  5. Determine which RFID-enabled device you want to use going forward
    • Every RFID-enabled device will produce a different string, some are longer than others
    • If you do NOT enter a PIN and just swipe the RFID device, you’ll see the RFID serial number in the text editor. Test multiple cards and fobs to find which has the longest serial number and what’s most convenient for you to use.
    • Perform final testing by entering a pin of any length and swiping the RFID device you’ve chosen, then watching the password get typed out in the text editor.
  6. When you’re comfortable using the device, start setting passwords
    • For example, in Windows, press Control-Alt-Delete and select Change Password.
    • Enter the old password, then click on the new password field
    • Enter a PIN of your choosing and swipe the RFID device, the Cyperpod will “type” the new password into the field and automatically press ENTER – Windows will complain that you didn’t enter the password twice, this is normal.
    • Click into the second field, type in your PIN and swipe your RFID device and it will “type” the new password into the second field and automatically press ENTER, and the process will be complete.
    • Lock the workstation by pressing Windows – L
    • Unlock the workstation by using your Cipherpod

Basic Operation

How Cipherpod Works

Cipherpod generates strong passwords by combining three elements:

  • Your PIN (something you know)
  • Your RFID card (something you have)
  • Device secret key (built into your Cipherpod)

Important: All three elements are required. Without your specific PIN and RFID card, your Cipherpod cannot generate your correct passwords.

The Three-Step Process

  1. Enter PIN – Tap your numbers on the touch pad
  2. Present RFID Card – Hold your card near the device
  3. Password Generated – Cipherpod types your password automatically

Determining a PIN

PIN Length Options

  • 1-4 digits: Generates 8-character passwords (~50-bit, for older systems or low-security devices only)
    • Good for: home logins, basic websites like logging into a news site, very old servers
    • Example: 1234 → 8-character password
  • 5-8 digits: Generates 23-character passwords (128-bit)
    • Good for: Important accounts, office logins, banking sites, public-key email signing, hospital use
    • Example: 54321 → 23-character password
  • 9-26 digits: Generates 43-character passwords (256-bit)
    • Good for: Maximum security, whole-drive encryption, Bitcoin wallets, Certificate Authorities
    • Example: 897867564 → 43-character password

Note: All passwords generated will include uppercase, lowercase, numbers, and symbols for maximum compliance with even the strongest password standards & requirements no matter what industry the Cipherpod is used for.

PIN Security Tips

Unless you’re using Cipherpod for finance, Top Secret, Government or Government contracting work, it’s okay for PINs to be easy. You can generally use your birthday, anniversary or other things that are easy to remember. This is contrary to common security practice but is what makes the Cipherpod so powerful.

  • Choose memorable numbers (birthdate, anniversary, etc.)
  • You can even write your PIN down – it’s useless without your RFID card and device
    • Unless you are in a secure or audited environment such as finance or government, in which case you need to put your PIN in a password manager.
  • Use different PIN lengths for different security needs
  • Change your PIN or RFID device to change your password
    • 1234 will output a password
    • 1235 will output a completely different password – changing a single digit is all it takes
    • Using a different RFID device with the same PIN will also generate a completely different password.

Using Your RFID Token

Acceptable Cards

Cipherpod works with any RFID-enabled card or token (though some will be more secure than others):

  • Building access cards
  • Transit/metro cards
  • Hotel key cards
  • Credit cards with tap-to-pay
  • The included key fobs that came with Cipherpod

Using RFID Cards and Tokens

  1. After entering your PIN, tap your card or fob on the underside of the Cipherpod and it will type the password.
  2. If you do not enter a PIN, it will type out the RFID token’s serial number and hit ENTER for you
    • To determine which card/fob is best to use, open Windows Notepad (or other text editor) and allow the Cipherpod to type out the RFID token’s serial number there
    • Try multiple keys, cards or fobs, even an old credit card – see that some are longer than others
      • Also see that credit card information is NOT actually used, only the serial number of the card
    • Now consider which is easiest and which are longer: if you need security choose the longest one. If you need convenience, choose whichever device is easiest for you to work with
    • Note that it’s best to have two of these card or fobs, such as two hotel room keys, two cardkeys or two fobs, because if you only have one and it’s lost, it is impossible to create your same passwords again.

Multiple RFID Devices

  • Each RFID card generates a different password
  • You can use multiple cards for different accounts, even with the same PIN
  • Family members can share one Cipherpod with personal RFID devices and but post the PIN on the ‘fridge – parents can change the PIN for different family accounts to retain control of home IT.

Daily Use Guide

For Computer Login

  1. Boot your computer to the password prompt
  2. Connect Cipherpod via USB-C cable, wait for the Power On Self Test (POST) to complete
  3. Enter your PIN on the touch pad
  4. Present RFID card to the device
  5. Cipherpod types password into the login field and presses ENTER for you
  6. You are now logged in

For Website Passwords

  1. Navigate to login page on your browser
  2. Click in password field
  3. Enter your PIN
  4. Present RFID card to Cipherpod
  5. Password appears in the field automatically and ENTER is pressed for you

For Remote Access

Cipherpod is safe for use over RDP, VPN, or Remote Desktop connections:

  • Click in password field
  • Enter your PIN
  • Present RFID card to Cipherpod
  • Password is typed into authentication form and ENTER is pressed for you
  • You should at this time be presented with a multifactor authentication prompt, which you still need to satisfy – Cipherpod is not an MFA device.

For Whole Drive Encryption

Cipherpod works without an operating system – if you’re at the boot stage to press Delete or F2 on your keyboard to enter the computer BIOS, Cipherpod will enter a credential when needed. Pre-boot credentials for any encryption software or hardware that prompts for a password are compatible.

Warning: Encryption works! When you use a Cipherpod to enter a password for whole-drive encryption with high-quality encryption software or hardware, that data is absolutely secure. Valent Holdings keeps no records of sold Cipherpods or their keys, and only Cipherpod Originals can be replaced. If your Cipherpod Black or RFID token are destroyed or lost or you forget your PIN, that data is most assuredly gone and unrecoverable, nobody is ever getting it back.

  • Determine what RFID device you want to use and what PIN you want to use. PINs should be 5-9 digits or more.
  • Test in MS Notepad or other text editor and ensure you can use Cipherpod the same way every time
  • When setting up whole-drive encryption, set your password using the same method you’ve tested above. If it’s already set up with a different password, go through the password change process for your encryption software/hardware.
    • ProTip: Some encryption software/hardware will balk at the fact that Cipherpod automatically presses ENTER after password output making it difficult to set your new password. Have the Cipherpod type the password into Notepad (or other text editor), and then copy/paste that enormous password into the encryption software during setup. Be sure to only copy the exact string that Cipherpod types into Notepad, not the carriage return/ENTER afterwards.
    • This same enormous password could be escrowed into a password manager for safe keeping. This way if your Cipherpod or RFID devices are lost/stolen/damaged or your PIN is forgotten, you still have access to the encrypted device. Warning: this also means if that password manager is compromised, so is your device! Optimally, have a spare Cipherpod and RFID device, and keep your PIN in the password manager instead.
  • Your encryption software/hardware should have a test feature – use it to ensure the Cipherpod password was correctly provided
  • Reboot your machine and perform final testing
  • After final testing and knowing you can use the Cipherpod and the encryption software/hardware correctly, you can now put confidential data on the device. Backups of this confidential data should be kept on another encrypted device, so that if the original fails you don’t lose your data.

Troubleshooting

Cipherpod does not light up when connected

Problem: Cipherpod seems “dead”

  • Sometimes static on your fingertips in a carpeted room can disable a USB port until reboot. Troubleshoot the port and cable:
    • Try different USB port
    • Use different USB cable
    • Check cable connection to Cipherpod – disconnect and reconnect
  • Turn off computer/device, wait five seconds and turn back on with Cipherpod connected – it should light up at reboot. If it doesn’t, do it again with a different port. If it’s still not lighting up, contact Valent for a replacement.

Problem: Cipherpod lights up, but its only red, it doesn’t stay blue or green

  • Disconnect and reconnect Cipherpod to a different USB port
  • Try a different USB cable
  • If it still only turns red then it has failed self-test and the device is defective, contact Valent for a replacement.

Device Not Recognized

Problem: Cipherpod lights up, but there’s never any output

  • Disconnect and reconnect Cipherpod on a different USB port
  • After it lights up and completes POST testing (a few seconds), type any PIN and touch your RFID device to the bottom SLOWLY – it should output a password.
  • If there’s still no output:
    • Disconnect and reconnect Cipherpod
    • Touch your RFID device to the bottom SLOWLY without entering a PIN – you should get ouput
    • If you don’t, try any other RFID device, including the fobs that came with Cipherpod. It could be that the RFID card/fob has stopped working.
    • If you try BOTH RFID devices (without entering a PIN) that came with Cipherpod and never get output, then contact Valent for a replacement.

Wrong Password Generated

Problem: Password output never works

  • Double-check PIN entry
  • Verify correct RFID card used
  • Capacitive touchpads can be prone to static electricity or environmental interference: take a damp (not wet) cloth and do a single wipe from one side to the other on the touchpad, and then let it dry. Wash and dry your hands. When everything is try, type your PIN deliberately (not too slowly, just type it out) and swipe your RFID device again. Watch the Cipherpod lights change with every key press, the lights should change with each one.
  • If you press a key and there is never a lighting change, or if the lights change with some keys and not others, then you have a defective keypad, contact Valent for a replacement unit.
  • Open MS Notepad or other text editor and just type any 2 digit PIN, then scan your RFID card. Do it again, then again, then again (3 times) entering the same 2 digits every time. If the password shown in Notepad is ever wrong and you are certain you entered the PIN correctly, you have a defective keypad, contact Valent for a replacement unit.

RFID Card Not Reading

Problem: Card not detected by device

RFID devices can be tested by opening MS Notepad or another text editor and not entering a PIN – just scan the device, you’ll see the serial number get output in the text editor.

Cipherpod has on-board tests (POST Testing) to ensure hardware is working properly. If your device doesn’t turn red, it’s probably not the Cipherpod (though not impossible).

  • Move card closer to device (within 1 inch)
  • Try different angle or position; RFID devices have antennas, which must form an X against the reader (reader and sender antennas need to cross when near each other for optimal reading)
  • Ensure card has RFID chip (not just magnetic stripe). Some cards are not RFID compatible and need to be tested for compatibility before use.
  • Try using the RFID fobs that came with Cipherpod, which were tested prior to shipping. If these and no other RFID device will scan then contact Valent for a potential replacement, and if a bug is found in our POST tests we will update future device generations.

Safety and Care

Physical Care

  • Keep dry – Avoid water and excessive moisture, Cipherpod is not waterproof.
  • Handle with care– Cipherpods are pretty tough, but they’re not indestructible. They’re designed to survive life and backpacks and daily use, not violence.
  • Store safely – Use protective case when traveling, don’t toss in a backpack with keys or metal that may puncture the housing or scratch the keypad. Use of a Cipherpod Case is highly recommended.
  • Clean carefully – If necessary, spray Windex, 409 or other cleaner on a static-free cloth, and then gently clean the Cipherpod. Allow to fully dry before use.

Security Precautions

  • Don’t disassemble – Opening device voids warranty and can prevent consistent password generation
  • Protect from static – Handle with care in dry environments, static electricity can destroy sensitive electronics.
  • Secure storage – Keep Cipherpod and RFID device separate when not in use. We recommend storage in a Cipherpod Case.
  • PIN privacy – While PIN can be written down in most situations, there are some situations where you need to keep it private such as within high security environments or as government contractors.

Temperature Limits

  • Operating: 0°C to 50°C (32°F to 122°F)
  • Storage: -20°C to 60°C (-15°F to 140°F)
  • Humidity: 5% to 90% non-condensing

Support Information

Warranty

Warning: Cipherpod Blacks are shipped with a unique key which cannot be recreated. We check every device for defects prior to shipping but if you need to perform a warranty exchange on a Cipherpod Black, your previously generated keys will not be recoverable. We recommend purchase of at least a pair of Cipherpod Black units for this reason.

Warranty periods are short because we keep minimal purchasing records to protect our customers. The longer our return/warranty window, the longer we have to keep customer data to match!

  • Return Period: 15 day unopened, 30 day opened and defective. Test your Cipherpod on arrival.
  • Coverage: “Defective” means manufacturing defects and firmware issues not caught in pre-ship testing. All devices are tested and verified working prior to shipping.
  • Exchanges: For the first 3 months and with use of a Cipherpod Case, we will exchange Cipherpod Originals for a new one if original device is damaged or not working properly.
  • Exclusions: Obvious physical damage, tampering/reverse engineering, misuse

Contact Support

Existing customers can contact us via the support form below. Note that to protect our customers we retain minimal purchasing records: please keep your own records and don’t be surprised if we have no record of your purchase, but we’ll still work to make things right.

Your original invoice will have an order number. This will have come with the order when it arrived or it would have been emailed to you. We actually don't keep customer records - this field is to prevent spam and abuse as the order number is in a specific format.
Enter email address, both used for contact AND used to look up your order and order history.
Product
Tell us about what's wrong with your purchase and how we can make it right.

Documentation Version: 1.0
Document Date: August 2025
Cipherpod Firmware: Alpha 1