New posts in Passwords

Password entry: are "paste from password manager" and "eyeball to view passwords" mutually-exclusive features?

Is bcrypt(strtolower(hex(md5(pass)))) ok for storing passwords?

Why does Windows not always force me to confirm my password when changing it?

If hashing should occur server-side, how do you protect the plaintext in transit?

How can we eliminate passwords given the problems with biometric authentication?

What's the point of Microsoft Account 2FA if it still lets me log in using password instead?

How does a 'rainbow table' hacker obtain password hashes in the first place?

Specific character based policy for passwords

Client side password hashing with static salt - did I find a breach?

Is it safe to share your password security plan with others?