Collaborate Disseminate
This question already has an answer here:
Is having the username and password fields on different pages more secure?
4 answers
… Continue reading Are 2-page website logins more secure than 1-page logins? [duplicate]
From time to time, some users can accidently type their password in the username field, either because they missed the tab key or because they thought their account was simply locked, not logged out (on Windows for example).
According to … Continue reading What are the benefits of logging the username of a failed authentication attempt?
So I’ve noticed a recent (and irritating) trend to require user names to have numbers in them. Is there really any security value to this?
Continue reading Does having a number in your username make it more secure?
We’re using pin number for username retrieval process. Similar to a standard bank solution where a user must enter their ssn and account number to get their username. Is it necessary to expire this pin number after six mont… Continue reading Should pin numbers expire?
We’re using pin number for username retrieval process. Similar to a standard bank solution where a user must enter their ssn and account number to get their username. Is it necessary to expire this pin number after six mont… Continue reading Should pin numbers expire?
I have big problems trying to remember different usernames for each site. Chrome remembers only passwords, so I should install a password manager, however it’s crazy you have to do that in order to do something so basic as d… Continue reading Should we use different usernames for each website, to achieve better anonymity?
After logged in to application, why one should use “access token” instead of simply using “user name”, to call further APIs ? How it is more secured with access token ?
Using emails as usernames for webapps is a convenient way to avoid the “yet another online username” problem. As such, by using this approach, the emails should be easily available in the backend to do user/pass checks.
Howe… Continue reading How to handle emails as usernames under GDPR?
Why use usernames, and not just email addresses, to identify users? – What is the main concern or the main case when a security expert (which I’m not) should recommend inserting another layer of usernames, for example, when a native/web ap… Continue reading Why use usernames and not just email addresses to identify users?
People in the security world recommend changing the hostname of a computer to something that is not connected to the user. For example: “don’t name it: MacbookPro Erica.” This way IT staff and ‘hackers’ have no way to identif… Continue reading Username visibility on network