Step-by-Step Guide to Changing Your USB Token PIN

When you receive a new Digital Signature Certificate USB token from an authorized registration authority, it is configured with a factory-default user PIN (such as 12345678 for ePass2003 or 12345678 for Watchdata ProxKey). Changing this default PIN immediately is the single most important security step to protect your digital signature from unauthorized usage.

Why Changing Your Default PIN is Critical

Default PINs are publicly known to IT vendors, staff, and anyone familiar with hardware crypto tokens:

• Prevent Unauthorized Signings: Anyone with physical access to your laptop and token can sign high-value contracts, filings, or bids if the default PIN remains unchanged.
• Prevent Token Lockout: Tokens have a maximum retry threshold (typically 5 to 15 incorrect attempts). If someone repeatedly guesses the PIN incorrectly, the token hardware locks permanently.

How to Change PIN on ePass2003 Auto Token

Follow these steps on a Windows PC:

• Step 1: Plug your ePass2003 USB token into your computer.
• Step 2: Open the ePass2003 Token Manager from your desktop or taskbar notification area.
• Step 3: Click on Login and enter your current user PIN (factory default: 12345678).
• Step 4: Click on the Change User PIN button on the left sidebar.
• Step 5: Enter your old PIN once, followed by your new PIN twice (between 4 to 16 alphanumeric characters).
• Step 6: Click OK. You will receive a confirmation message stating "User PIN changed successfully".

How to Change PIN on Watchdata ProxKey Token

For Watchdata ProxKey users:

• Step 1: Plug in your ProxKey token and launch the WD ProxKey Tool.
• Step 2: Navigate to the Admin Options or Token Management tab.
• Step 3: Select Change User PIN.
• Step 4: Input your existing PIN, specify the new strong PIN, confirm, and save.

Best Practices for Creating a Secure Token PIN

Keep these precautions in mind:

• Do not use obvious sequences like 12345678, 00000000, or your birth year.
• Memorize your PIN or store it securely in an encrypted password manager.
• Never write the PIN on a sticky note attached to the USB token.