New posts in Account Security

On my website's account creation form, how to avoid leaking the information that an email address already has an account?

Why does Windows not always force me to confirm my password when changing it?

What is the suggested best practice for changing a user's email address?

Are password managers more secure than a slightly different password for each website?

Why can't I just let customers connect directly to my database?

Is it possible to mac-spoof Xfinity Wireless?

Log user out after change of IP address?

Is revealing a PC account user name bad?

Stolen MacBook: should I worry about my data?

Why can I log in to my Facebook account with a misspelled email/password?