Category Archives: passwords

Is using TOTP from Authenticator app on a mobile device instead of passwords inherently 2FA?

Posted on by

A related discussion can be found, specifically addressing the security implications of using only TOTP for single-factor authentication However, in my view, using a TOTP code from a Google Authenticator on a mobile device effectively cons… Continue reading Is using TOTP from Authenticator app on a mobile device instead of passwords inherently 2FA?→

How passkeys are reshaping user security and convenience

Posted on by

In this Help Net Security interview, Anna Pobletts, Head of Passwordless at 1Password, talks about passkey adoption and its acceleration in 2024. This trend is particularly notable among highly-regulated services like fintech and banking, where users s… Continue reading How passkeys are reshaping user security and convenience→

Windows AD – Fake User Account with Multiple Passwords to Detect Password Spray

Posted on by

TL;DR
I’m trying to implement a fake user account that has multiple sets of credentials that can be used. Instead of a specific password, any one password from a list of them could be used to authenticate to the account. By doing so, we c… Continue reading Windows AD – Fake User Account with Multiple Passwords to Detect Password Spray→

Does not storing passwords in browser really matter given cookie hijacking exists?

Posted on by

I see lots of articles suggesting not storing passwords in the browser, and it made perfect sense to me, if I can access this data easily, an attacker probably can too.
But then I found out about cookie hijacking, and it seems to me that i… Continue reading Does not storing passwords in browser really matter given cookie hijacking exists?→

A script in Python that can check which letter and number the first character of my password is? [closed]

Posted on by

My Gmail email address doesn’t have a recovery email and phone number, and I’ve forgotten my password. My password consists of A-Z, a-z, and 0-9.
In Python, I need a script to find the character that my password starts with. So, for exampl… Continue reading A script in Python that can check which letter and number the first character of my password is? [closed]→