I originally gave this a bad review and I almost sent the card back. But after 2 months, I have mostly changed my mind. I'm leaving my old review below, but here is a new perspective and 3 more stars, for 4 stars total.

I had no trouble installing this or using it many many times afterwards. It has worked, as far as I can tell, exactly as CapitalOne wants it to work. It was different from my Bank of America Shop Safe, so at first I hated it. But I have found a way to use it well. It has a drawback I will describe, but in some ways its also better. Here is how I use it.
1. Keep the extension disabled, except when you need a new virtual credit card number. That way it cannot spy on you at every website you go to. When you need one, enable it, get the virtual card number and record it in your password vault. Disable the extension. The only problem here is that you must have a website open to "attach" the virtual number to. I have been able to occasionally get a number that is not yet attached to a site, but I cannot repeat it. When I can, I will add that info here. But you are not actually limited to that website. You can even use the number over the phone. It appears that the number is permanently attached to the first credit processor that uses it, like ShopSafe was. This is very useful, because giving number over the phone to a human is much more dangerous than typing it into a computer. (CapitalOne - Please support getting numbers that are independent of a website!! Thanks!)

Your charge goes pending at first, so you cannot delete virtual card right away. But every time you get a new one, check for old ones that you can delete. This was my substitute for being able to define an expiration date in ShopSafe. Its not automatic, and you cannot set a maximum charge amount, but it seems good enough. That said, I decided I did not actually have to delete them every time. As long as I knew who I gave it to, if I got any bogus charges, I would know where the problem was. And since the number is probably locked to the first card processor that uses it, it is unlikely that it could be used by anyone who stole it in an IT breach from a company where I used it. I could probably have done this with ShopSafe too, but didnt realize it. Now I feel comfortable using it for recurring charges also.

So...I am pretty happy right now. If I stopped being able to use a number over the phone, I would probably go looking for another credit card to replace this. Using it over the phone is not officially supported and this is the main reason I only have it 4 stars. The other reason is that I have to enable and disable it every time I use it. But thats not too onerous. Thanks Capital One! Sorry for the misunderstanding at first....

*********** ORIGINAL REVIEW ***********
If you are looking for a ShopSafe replacement (recently cancelled by Bank of America) Eno based virtual credit card numbers from a CapitalOne card are not for you. These virtual credit card numbers do not give you the same protections from online fraud and do not work the way you would expect. First, you must use this app to create and manage virtual numbers. There is no website that I can find. This app is "always on" and watching your browsing activity to look for a site it thinks you might want a virtual credit card number for. So your browsing activity is no longer private. You cannot create a virtual card number until the app sees you on such a site. I was able to activate it on a dummy site, but then it links that URL to the credit card number. It set the expiration date of the virtual credit card 5 years into the future, oddly, past the expiration date for my real Capital One credit card. You cannot set a virtual number to expire after a certain number of months, like you could for ShopSafe numbers. Likewise, you cannot set a maximum charge amount for a virtual number, so anyone who gets this can charge as much as they like. So Eno virtual credit card numbers don't protect you from an unscrupulous online vendor, like ShopSafe did. In fact, if you read the Terms and Conditions, you will see that the virtual number may not even be locked to a specific merchant, like ShopSafe was. They appear to be testing this, but "...a VC# you create for use Merchant A should work at Merchant A, but may or may not work at Merchant B." So in my opinion, this does not really protect me very much. In fact, since there are no limits on the merchants and you cannot limit the maximum amount nor set a short expiration date, it may make you more vulnerable to fraud. If someone steals a virtual number from a company you gave it to, they can use it just as if they stole a card from your wallet. The only reasonable thing you can really do is delete the virtual number, but that assumes you know it was stolen. We usually dont find out about that until long long after it happens.

In fairness, unlike other reviews, I will say that I had no problems using my phone number to validate (via text messages) and get this set up. Setup worked just fine.

I am thinking carefully, because I really want a ShopSafe alternative, but this credit card will probably go back.

I'm a long-time Capital One Banking customer. After BofA discontinued their virtual credit card numbers ("ShopSafe") I opened a Capital One Savor One card account for the SOLE PURPOSE OF USING VIRTUAL NUMBERS FOR ONLINE SHOPPING. After receiving the card and attempting to set up Eno I was frustrated by the inability to log into my account / verify my account, which requires the ability to receive an SMS text. I do not have a mobile phone, and the Google Voice account that I have isn't "acceptable" to the Eno verification process. Every other financial account or service that I have (and there are almost a dozen of them, not including the IRS..) allows me to verify either by a phone call, a hard-copy mailed PIN, or an email sent to the address on file. It appears that Capital One doesn't care much about their customer's needs or requirements, since the only option being provided for Eno verification is the SMS/text of an identifier. After an hour with Tech Support and an escalation to a supervisor I've been told "this is the way it is". So non-mobile phone users are automatically excluded as Eno users. That is blind thinking.

Since I can't use Eno I've decided to open a competitor's card account (the one remaining provider of virtual card numbers), and while I'm at it I may as well move my banking accounts as well. I already have too many accounts at different institutions.

If this isn't fixed in 90 days I'll have no need for the Savor One card. After I've earned the $150 spiff that I get for the new card I'll be closing that account. Thanks Capital One for the $150 and for the memories.

ENO works sometimes and it doesn't sometimes. When it doesn't I can't find a way to generate a virtual number manually so I'm left with no other options but to use my credit card numbers instead of virtual numbers. I would like to find a way to be able to use virtual numbers all the time.

The best feature about this is that I can't enable access on my account.

Spent probably a couple of hours over 2 days on the phone with 8667500873 trying to get logged into this thing - the only verification option it offers is text message, and despite my having a mobile number on my account, says I don't and fails to verify my mobile number when I enter it. Eventually I "hit the max" and have to wait for the next day to try again (and call in again). This is ridiculous - just got this Capital One card because BofA is getting rid of shopsafe and I rely on virtual numbers. Please make it possible to verify some way other than a mobile number, because this is clearly broken! Also, the android app is not compatible with my device, so if that was the alternative it also does not work.

This is a great app that I've been using pretty much since it's inception on Firefox and Chrome. I rarely have problems with it. Typically it pops up automatically on any page that has fields for credit card information, searches for an existing card number for the site, and if it doesn't find one it automatically generates and fills the information and saves the fake card for future use. Sweet! Hopefully I won't have to change my credit card information on 100 websites next time somebody hacks one. EDIT 2020.07.07: Been having problems for the last month. No longer works on FF. That's the browser I use to do almost all web browsing and shopping. Won't be able to use Eno anymore.

This does not work right now. I called support and was told I have to use Chrome that this extension does not work with Firefox. Why even have it? It used to work great. Wish they would fix it.

Intuitive app that offers no features beyond a "Something went wrong" message 9 times out of 10 after logging in, preventing usage. A bold, progressive usage model which will make you question why you installed it to begin with.

horrible and phone help was worse i cant get into ENO to use my card online

I like the feature a lot. I wish there were a way to sign in with push notification or something instead of password every time, but it's nice to be able to have virtual cards.

Also getting "Good news–you're ready for an update to your browser extension. All you have to do is fully quit and restart your browser, and you'll be all set to keep using virtual numbers." Restart does not help

It works now. Thanks

Was loving this add on until today when I went to buy something online that was time sensitive and I could not get past "Good news–you're ready for an update to your browser extension. All you have to do is fully quit and restart your browser, and you'll be all set to keep using virtual numbers"

No amount of restarting the browser would "update" the plugin nor did uninstalling and re-installing. cmon!

Edit: Though I'm fully open to the possibility that a recent Firefox update broke the Eno extension.

Was good but now telling me to restart browser to load new version: "Good news–you're ready for an update to your browser extension. All you have to do is fully quit and restart your browser, and you'll be all set to keep using virtual numbers."

Restarting browser does not resolve nor does removing and reinstalling the add-on. And yes, sadly, third-party are allowed.

Love this! Been wanting this feature for a long time. Add-on works great on mobile.

Doesn't work: "Something went wrong" in both the add-on popup, and their setup page (capitalone.com/applications/eno/virtualnumbers/setup). Tried 5 times to sign in, with my username/password copied from the clipboard to make sure I didn't mistype anything. Also tried the Chrome extension - same failure.

GIVE ME A USEFUL ERROR! Not "Something went wrong". This is Error Management 101.

An it's not a "third party cookies problem". I made sure Firefox didn't block anything, and setup didn't work from CapitalOne's own setup page (no 3rd party situation there). This add-on is just broken.

Also, add-ons like these, that require permissions to READ AND CHANGE ALL THE DATA ON WEBSITES YOU VISIT, are a security nightmare. I worked at Google, and I can tell you there are easy ways to make extensions *request permissions on demand*, in a site-specific manner, instead of asking for that blank permission upfront, which most hapless users will automatically grant.

If this extension gets compromised (as quite a few others have), you're screwed. It will be able to read your bank/credit card/online Bitcoin wallet/ANY OTHER PASSWORD and data.

And it doesn't even work.

Uninstalled.

If you're looking for a simple and reliable alternative, sign up for Privacy.com. No spying extension to install - just generate card numbers from their website.

Advice for Capital One: you may think you're making it more convenient for customers to provide an add-on instead of a simple page to generate virtual CC #s from your own website (like Privacy.com does). Well, you're not. The more complicated a solution is, the higher the likelihood for it to fail.

If you really want to offer virtual card numbers for your customers, please do so in a simple, honest, transparent way - like Privacy.com. You have the advantage of the brand, cashback etc.

Works as it should. Love it