New posts in Password Management

Is LastPass' locally stored One-Time-Password recovery a security problem?

Does NIST really recommend PBKDF2 for password hashing?

Is it safe to store the database password in a PHP file?

Prevent denial of service attacks against slow hashing functions?

How big should salt be?

Do spaces in a passphrase really add any more security/entropy?

Should I enable domain authentication in my DMZ

Is it possible to easily retrieve Thunderbird's passwords with access to HDD?

Benefits and drawbacks of giving an Administrator two accounts for elevated rights and another for daily use, such as email

What to do about websites that store plain text passwords