New posts in Passwords

What is the recommended expiration for a password reset link?

How do universities and schools securely sync passwords between multiple services?

Why check your email in haveibeenpwned rather than regularly changing your password regardless of any leaks?

Why is Gbt3fC79ZmMEFUFJ a weak password?

How long should a password reset token remain valid?

How to secure passwords over HTTP?

Is password entry being recorded on camera a realistic concern?

Is it bad practice to prefix my hash with the algorithm used?

Should admin users confirm their password before changing a user password?

Why is SHA-256 not good for passwords?