Brennenstuhl on Security
Search

Topic 10 entries

Passwords

Password policies that people can follow, systems that do not punish password managers, and the attacks on reused credentials.

Passwords are not going away soon, so they should at least be handled well: long passphrases allowed, password managers welcomed, reuse detected. The field guide has the research; the essays have the implementation advice.

Follow this topic: RSS JSON Feed Markdown

Essays

  1. Password Attack Guide: What is Password Spraying?
  2. Passwordless: Critical Notes on FIDO2 Passkeys
  3. Long Password Support for Safer Login Systems Usable Password Security
  4. Max Password Length: A Secure Password Guide Usable Password Security
  5. How to Design a Strong & Usable Password Policy Usable Password Security
  6. How to: Password-Manager Friendly Login Forms Usable Password Security

Field guide

  1. What should a password policy require? Field Guide
  2. Do password strength meters work? Field Guide
  3. How common is password reuse? Field Guide
  4. How do you protect accounts from stolen credentials? Field Guide