Is it insecure to display the number of characters when users enter a new passphrase?

When users are entering a new passphrase somewhere, it’s helpful to provide feedback on the number of characters received by the system.
In a user experience (UX) test I just ran, my user created a passphrase in her password manager, and t… Continue reading Is it insecure to display the number of characters when users enter a new passphrase?

Why should we only keep the private key secret, why not the public key?

If I am not wrong, both private key and public key are the same since communication is possible only if both keys are matching. So, why we should only keep the private key secret, why not public key? When I generate a key by ssh-keygen com… Continue reading Why should we only keep the private key secret, why not the public key?