The functions performed by the person or processes responsible for security of passwords on a given system.

learn more… | top users | synonyms

0
votes
0answers
11 views

Secure Distribution of Admin-Defined Credentials to End-Users [duplicate]

Situation: I need to safely send database credentials created by the admin to users in a secure fashion. Currently, creds have been sent to users via plain text email (which is a huge security ...
0
votes
2answers
121 views

Hashed master password and generated encryption key in a password manager program

I'm writing a WPF password manager application to practice programming, so far this is the scheme I intend to use to store master password and individual site password: Master password: Generate a ...
0
votes
0answers
74 views

Web app crypto scheme

For learning purposes I am trying to build a web application (Symfony2, PHP) that allows users to post content and have their own password vault, everything encrypted. Since I want to users to be able ...
0
votes
1answer
56 views

Does Linux and Mac OSX have built-in Credential/Password Managers with API access? [closed]

Does Linux and Mac OSX have built-in Credential/Password Managers with API access like Windows has with its CredMan (CredWrite, etc). It would be preferrable if they could be used without the need to ...
0
votes
0answers
99 views

Secure password transfer from stdout to another window

I am currently trying to build a little, secure password manager. As of now, I've implemented the encryption. Each website has its own file and each file has a number of fields (Most commonly username ...
0
votes
0answers
97 views

What do I do when a ISP stores passwords as plaintext

I am living in a student housing in UK. Today, I was suddenly asked to put in my log in credentials for the internet service and because I forgot the credentials, I went to find my password section. ...
0
votes
2answers
362 views

Automated software hackers use to try passwords

Because of the eBay hacking, I had to go and look for other accounts that I have used the same password to change the passwords on those site as well. (I know that it's very bad to have same passwords ...
0
votes
2answers
193 views

Password management [duplicate]

I am work in small company. I am Java Developer and Sysadmin of remote servers. I have problem with store password from several servers. How to best way to manage passwords in company?
0
votes
0answers
765 views

Why do you need to login after you change a password? [duplicate]

I can't recall a website that after resetting my password I was automatically logged in, I had to type the password again - which seems quite silly. From a security perspective, why do websites do ...
0
votes
0answers
241 views

What is the most secure way to recover password online? [duplicate]

Possible Duplicate: Can anyone provide references for implementing web application self password reset mechanisms properly? I have website which sends generated password to any person who ...
0
votes
1answer
1k views

What's the idea behind requiring users to change password periodically? [duplicate]

Possible Duplicate: How does changing your password every 90 days increase security? Some sites require users to change their password every x days. For example, at least 3 online banking ...
0
votes
2answers
96 views

Does the password manager store the passwords in memory if I lock my computer?

After I unlock my PC the password manager (any type) needs the password again to unlock it's DB containing passwords. Question: Does the password manager store the passwords/DB in memory when the PC ...
-1
votes
4answers
341 views

How do big companies and wealthy people secure their information? And how can I secure mine?

I've recently had some success and traffic increase with an online business I own and due to that someone has hacked my domain email and twitter accounts. My bank password is the same and I just ...
-1
votes
2answers
33 views

What could be a suitable solution to single factor authorization worksheet bank password circulation with no control?

Passwords for various banks are written in an excel sheet and this excel sheet is password protected. However, there is no control on circulation of this sheet, for many banks only single factor ...
-1
votes
2answers
685 views

Can I get past information of what I typed in my computer or laptop with my keyboard [closed]

Once I forget my ID's password. I recovered it and changed it about a month ago but I forget again. Is there any way to see the details stored in laptop what i typed in past to till now from my ...
-1
votes
1answer
209 views

Idea feedback wanted - easy and secure web notes manager (javascript) [closed]

I have an idea for a web app that I'd like to discuss. I like it a lot but chances are that I missed some evident security hole. Or, maybe it just sucks. The idea is a web-based secure text notes ...
-1
votes
1answer
60 views

What is the point in a password manager? [duplicate]

What is the point in a password manager? All someone has to do is crack the master password and then they have access to all the passwords than you have entered. I don't see how there is an added ...
-1
votes
3answers
96 views

What does one call the strategy of using “pre-password transforms” as passwords?

Suppose that instead of using, say, Google, let me in! as my Google password, I used some consistent transform of this string, say ZWE1NjMyNm? What search keywords would be helpful to search for ...
-1
votes
1answer
141 views

Should I log wrong passwords? [duplicate]

I have a public-facing web application where anyone can register an account. The passwords I store are salted and hashed. When someone tries to overtake the account of someone else through guessing ...
-1
votes
2answers
48 views

Secure OS for Website managing [closed]

I'm starting a new website project where I have many passwords (root,sql,wordpress, etc). I have a USB stick encrypted with TrueCrypt with a file of all my passwords. But I also want to be safe if i ...
-1
votes
1answer
612 views

What encryption hash function I should use for password securing? [duplicate]

Possible Duplicate: How to securely hash passwords? What is the best encryption algorithm? MD5, SHA1, SHA2 or maybe something else? Can you explain me why?
-1
votes
1answer
33 views

Double step verification system for homepage

I want to share some of my work with some double step verification system. PGP is not enough, since some of my clients cannot use it. First, you need a password to login but you also need the code ...
-1
votes
2answers
99 views

Using a password hash…as the password? [duplicate]

Ok, this is probably a really stupid idea, but I can't really see why it would be a bad idea. Maybe someone can enlighten me. Why couldn't you enter a password good hashing algorithm like bcrypt, ...
-1
votes
2answers
799 views

Looking for safe, simple way to store passwords with PHP 5.2.17 [duplicate]

I've found many posts on StackOverflow and other sites using Google, but since security is always changing, and what was safe a few months ago not me anymore... I felt the need to ask on here. ...
-2
votes
2answers
845 views

How to secure a login.php file? [closed]

I have a hand built website, and am triying to build a cms/admin-panel, and my username and password, are not stored in a database, but, in a two setup file like seen below. index.php <?php ...
-2
votes
1answer
62 views

Password complexity policy and practicality [closed]

If you are a user and your company implements a password policy that says your password must have at least 8 characters, at least 1 number, at least one alphabet and at least 1 special character, ...
-2
votes
4answers
375 views

Getting password cracking time and byte storage from bruteforce?

I am stuck with this question, you can see it in the picture I have included below. PARTS (a and b) I know a-z will be 26^8, A-Z will be 26^8 guesses, and 0-9 will be 10^8 guesses. But I can't relate ...
-3
votes
1answer
181 views

Online Password Storage: Is this safe and how can I implement this?

Hello there for an online Tool which offers the feature of storing passwords online I want to implement the following process: A user is generating a secure secret random key with Javascript This ...
-3
votes
1answer
61 views

designing secure telnet [closed]

i came across this question and have been thinking about it without a final solution. The question is to design a secure telnet. essentially to login using a username and password using telnet. I do ...
-3
votes
1answer
60 views

Making my password secure [closed]

I don't understand much about this topic and I am not highly involved with it in any way. I want to improve my password because I had my account stolen once (still a mystery has to how) but I was ...
-3
votes
2answers
73 views

When should a password be hashed? [duplicate]

I develop a Smartphone App and have a little question: When should I hash the user passwords, on the device or upload them in plain text and hash them on the server before stored in the database?
-4
votes
1answer
440 views

Why don't we do dual password instead of forgot password?

You can see a link Forgot Password? nearby almost all login form. As I mentioned in question, Since passwords are completely protected from outside access unless owner reveal, I come up with this ...
-4
votes
1answer
583 views

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection [closed]

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection of WI-FI without using a keylogger. I tried a lots of softwares and efforts but unsuccessful. Can any one suggest. I ...
-5
votes
3answers
166 views

Is MS Windows more secure than Linux on this aspect?

The administrator account can be renamed which means the hacker needs to figure out two pieces of information : the user name and the password while there is always one root account in Linux named ...
-5
votes
1answer
94 views

what if an operating system can change your password [closed]

Everyone want security for their pc/laptops... NO DOUBT... So we protect them by some password. 'Longer password, more security' this is the tag line. But what if our computer can change our ...
-6
votes
1answer
563 views

Secure Web application Password vault/manager [duplicate]

I would like to build an open source online password vault which allows users to securely store their passwords, like Keepass or roboform, but where a user can access their passwords through a ...