New posts in Password Policy

If a provider sees the last 4 characters of my password, can they see it in full?

On two-step login forms, why is it the login name and not the password that's asked first?

Would allowing shorter passwords sometimes be more secure?

Why do some bank websites use passwords that are not case sensitive?

MySql root password stored in .my.cnf

New payment option on Paypal "Enter your online banking ID + password": Any mechanism that could make this safe?

What is the point in having arbitrary username requirements?

How can I store a password history to prevent reuse?

Intel How Strong is Your Password page, good advice?

Does prompting for security questions on new computers add any security on banking websites?