ppSD2 is equipped with a highly advanced password sharing abuse detection system known as “Trackstat”. This feature allows you to collect information about a user’s login habits. Using the information collected, the program will provide you with the probability that a user is sharing his/her password.

From the administrative control panel:

• “Stats” > “Password Sharing”

Since the program requires a significant data-set to draw conclusions about a user’s activities, this page will only display a list of users who have logged in enough times to meet those data-set requirements.

• Username: This is the user in question.
• Logins: Applicable logins used to make conclusions.
• Trackstat: Current trackstat rating for this user. A higher number indicates more of a chance of password sharing. This determination is based on the trackstat level that you set up in the program options. See section “Trackstat Settings” below for more information.
• Analysis: [Percent Difference] : N/A :: [Password Sharing Determination] :: [Unique IPs Detected From Logins]
  • Within the analysis, the program will also inform you about whether a user is on a network and whether the user’s account has experienced concurrent logins by two different computers at once.
• Options: The first icon allows you to view the IPs used to make the trackstat determination. The second icon allows you to reset the user’s trackstat.

From the administrative control panel:

• Click on “Setup”
• Set the option entitled “Track Logins?” to “Yes”
• Set the option entitled “Use Trackstat?” to “Yes”
• Click on “Update Options”

From the administrative control panel:

• Click on “Setup”
• Trackstat Rating: This option controls how strict the system will be. A lower value represents a stricter system, allowing for less unique IPs before flagging the user as sharing his/her password.
• Trackstat Logins: This option controls the required data-set of logins before the password sharing detection will kick in. It is recommended that you set this number to a value higher than 10 to ensure accurate determinations. The higher the number, the more accurate the system.
• Trackstat Action: When password sharing is suspected, what would you like to do? Setting this options to “email” will send a notice to the email address within the “Trackstat E-Mail” option. Setting this option to “deny” will prevent anyone from logging into the user’s account after the user is flagged for password sharing.
• Trackstat E-Mail: If the “Trackstat Action” option is set to “email”, this is the e-mail address to which the notification of potential password sharing will be sent.

When editing a user’s account, set the “IPs” field to the list of IP addresses that will be permitted to log into a user’s account.

• Click here for more information on editing a user’s account.

To activate the system, do the following from the ppSD2 control panel:

• Click on “Setup”
• Click on “Login Related Options”
• Set the option entitled “Accounts Locked to IPs?” to “Yes”

ppSD2 is set up to prevent multiple logins to a single account within a short period of time. If concurrent logins are detected, the user attempting to log in will be rejected and (if selected within the options) you will be notified of the concurrent login.

From the administrative control panel:

• Click on “Setup”
• Click on “Login Related Options”
• Set the option entitled “Prevent Concurrent Logins” to “Yes”
• Set the option entitled “Concurrent Login Action” to “Yes” if you wish to deny a user access to the account or “No” if you don’t wish to deny a user access.
• Set the option entitled “Notify Upon Concurrent Logins?” to “Yes” if you wish to be e-mailed when concurrent logins are detected or “No” if you do not wish to be notified.

Any account set as “Flag Exempt” will not be subjected to trackstat or concurrent login checks.

From the ppSD2 admin control panel, edit a user’s account and tick the “Flag Exempt?” checkbox.