SplashID Safe is not affected by Heartbleed!
Since SplashID Cloud Services
is run on Microsoft IIS servers, and not Linux or Unix servers, it does not employ the Open SSL library that contains the Heartbleed vulnerability.
That said, this is a widely used library that will affect many of the websites you login to, and this vulnerability has existed for some time, so we recommend that you change passwords on all sensitive sites to be safe, though you may want to wait a few days and check with the website to make sure they have updated their certificates to patch the issue.
You can use the password generator feature in SplashID Safe to generate strong passwords and save them in your SplashID records for easy (and secure!) recall.
For more info on Heartbleed: http://heartbleed.com