Symantec VIP review

Symantec VIP is a two-factor authentication credential wallet for accounts that support it. It can generate security codes or send a push request that the user approves with a swipe. For compatible websites, users scan a QR code to add a credential; the app then generates codes that refresh every 30 seconds.

That makes VIP a second-factor tool, not a password manager or a universal authenticator. A service has to support VIP, and the published product information does not list a complete compatibility directory. VIP also has hardware options: a security token, security key, security key micro, and security card. Prices for those devices are not published on the vendor's site.

The practical choice is between entering a rotating code and approving a push request. Either way, check that the account you want to protect supports VIP before choosing it.

For supported accounts, VIP gives users two ways to complete a second-factor check: enter a rotating security code or approve a push request with a swipe. The code refreshes every 30 seconds, according to the product details, so users do not have to wait for an SMS message to arrive. That is a useful option for accounts where VIP is supported and push approval is available.

The credential wallet can add compatible websites by scanning a QR code, and the product also offers physical credentials for people or organizations that want a hardware device. The listed choices include a security token, two types of security key, and a security card. Symantec describes its credentials as tamper-resistant and not duplicable; that is a vendor claim, not proof that every deployment is free of risk.

For organizations, the published pricing information lists an enterprise/custom-quote option. That may fit buyers who need organizational authentication, though the available details do not explain which features or support are included in the quote.

Pricing is hard to assess before contacting sales. The published pricing information lists enterprise pricing by custom quote, but publishes no monthly or annual rate, unit price, hardware price, or trial terms. It also does not state plan caps or what an enterprise quote includes. The pricing data is marked low confidence, so buyers should confirm terms directly before budgeting.

Device flexibility is another concern. In one Reddit thread, a Schwab user said VIP could only be used on one device; that is a user report, not a published product-wide limit. The published details do not explain official backup, recovery, or multi-device options. Losing access to a credential could therefore be a practical problem to resolve with the account provider.

Compatibility can also get awkward. A Reddit discussion about 1Password notes that a website’s standard TOTP QR code may work with another authenticator, but a proprietary VIP setup may not. Some commenters describe unofficial workarounds for getting a TOTP seed; those are not official support paths. Check compatibility and recovery options before relying on VIP for an important account.

The pricing page does not publish a price for Symantec VIP’s enterprise offering. The available pricing information lists enterprise access as custom-quoted, with no published monthly or annual rate, per-user charge, or included credential count. There is no listed free plan or trial, either.

That means there is no published tier-to-tier price jump to compare. We also can’t calculate the cost of adding users or hardware credentials from the available figures. Symantec lists hardware credentials—including a security token, security key, security key micro, and security card—but their prices and whether they are included in an enterprise quote are not published here.

Billing is another open question: monthly and annual terms are not published. Organizations should ask for the quote, billing commitment, hardware costs, and any minimums before comparing VIP with an authenticator app or another identity product. If you need a public price to get budget approval, VIP’s pricing information does not provide one.

Moving to VIP means checking which of your services support it, then adding compatible accounts to the credential wallet by scanning a QR code. For those accounts, VIP can generate security codes; some services also support push approvals. The published materials do not describe a bulk import, account migration tool, or data export process, so plan to confirm how each service handles re-enrollment before switching.

Leaving VIP may involve setting up another authentication method on each account. The available information does not say that credentials can be exported or transferred, and VIP’s anti-cloning feature means you should not assume credentials can be copied to another device. Users report device and compatibility friction; VIP also is not a fit for accounts that require standard TOTP compatibility. If multiple devices or a clean exit matter, ask support how recovery and replacement work before rollout. Keep another sign-in method available while changing account security settings.