Tag: password

Aerotwist – Better password form fields

Heartbleed (hopefully) had us all changing our passwords. A lot of passwords. It was a grim reminder of just how terrible so many password policies are, but that’s beside the point. This is great: It was so frustrating to have 1Password generate a password for me only to find out that the established password policy […]

Posted: May 01, 2014

Logins without logins.

Logins without logins. – Ideon Open Ideas. This is a really intriguing idea to me, but something doesn’t settle right. I’m sure it’s the “get off my lawn” in me but the possibilities for exploiting systems like this seem much more impactful when compared to the registration/username/password/login process we’re all very used to. While I […]

Posted: September 04, 2012

Everything you ever wanted to know about building a secure password reset feature

Troy Hunt: Everything you ever wanted to know about building a secure password reset feature. This is beyond in depth. While the article title might at first look like link bait, this author completely follows through on the claim and it’s impressive. In my experience perhaps the most lax implementation of password recovery is simply […]

Posted: July 24, 2012

Storing Passwords Securely

Storing Passwords Securely. Given the recent LinkedIn fumble I’m in agreement that it’s a great reminder to refresh our memories on proper security practices. I don’t claim to be any sort of security expert which is likely why I’m linking to articles on the topic all the time instead of writing them, but I do […]

Posted: June 07, 2012