What should I look out for when choosing a password manager tool for business and personal usage?

I am looking for a password manager that I can safely use for managing my work-related passwords, access codes, etc. as well as my personal stuff. The tool should be secure, ofc.
I am mainly interested in a free tool, or a low-cost subscri… Continue reading What should I look out for when choosing a password manager tool for business and personal usage?

What should I look out for when choosing a password manager tool for business and personal usage?

I am looking for a password manager that I can safely use for managing my work-related passwords, access codes, etc. as well as my personal stuff. The tool should be secure, ofc.
I am mainly interested in a free tool, or a low-cost subscri… Continue reading What should I look out for when choosing a password manager tool for business and personal usage?

Apple releases iOS 18, with security and privacy improvements

Apple has launched iOS 18, the latest significant iteration of the operating system powering its iPhones. Along with many new features and welcome customization options, iOS 18 brings several changes for improving users’ security and privacy. A s… Continue reading Apple releases iOS 18, with security and privacy improvements

Is it secure to block passwords that are too similar to other employees’ old passwords?

At my work, they don’t like different employees having ‘partially matching passwords.’
I had never thought anything of it before, but just now I realised what this means (or might mean.)
When I emailed the IT department, they were more tha… Continue reading Is it secure to block passwords that are too similar to other employees’ old passwords?

Whats the safest way to store 2fa/mfa secret key in database?

I try to implement a secure user login in my .net application. The first password is hashed with argon2id. The salt and the hashed password is stored in a database. SSL encryption and HttpOnly Cookie is used.
Now i want to add a multifacto… Continue reading Whats the safest way to store 2fa/mfa secret key in database?

Why shouldn’t I use the OAuth password grant if I have to implement a custom username+password login anyway?

I’m building a web REST API. Users must be able to authenticate themselves to this API.
I don’t know ahead of time which clients will want to use the API. I want to allow for the possibility of anyone creating their own client, like a cust… Continue reading Why shouldn’t I use the OAuth password grant if I have to implement a custom username+password login anyway?