New posts in Password Policy

How often should passwords change?

What do I need to do to secure log-in and registration for my website?

Password reset links: random value or authenticated message?

Banning specific passwords?

Is it a good idea to have a "master" password?

Why do some sites prevent users from reusing their old passwords?

Requiring regular password change but storing previous passwords?

Does having a minimum number of digits improve password security?

Why are passwords limited to 16 characters?

Is there any explanation (other than storing plaintext) for case-insensitive passwords?