Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our Questions

1 vote
1 answer
64 views

Databases for compromised passwords that browsers use

0 votes
2 answers
70 views

How much does the strength of the password depend on the variety of characters?

2 votes
1 answer
103 views

Where to store the password: in RAM or another user's home folder (Linux)

0 votes
1 answer
346 views

Hydra only executes one try per task then hangs

0 votes
1 answer
108 views

What tools currently allow to retrieve Windows 10/11 password hashes, given admin rights or physical access to unencrypted disks?

8 votes
3 answers
3k views

Argon2 vs SHA-512, what's better in my case?

27 votes
4 answers
10k views

Should I implement incorrect password delay in a website or a webservice?

0 votes
3 answers
589 views

is it a standard best practice to *display* the last-logged-in user by default on an individual employee laptop?

2 votes
1 answer
261 views

Security of re-encryption with a list of pre-computed password based keys

2 votes
3 answers
3k views

Is this a secure approach to store a master password?

4 votes
2 answers
792 views

How many bits of entropy should a password have to be reasonably future proof (10+ years)?

96 votes
10 answers
32k views

If a provider sees the last 4 characters of my password, can they see it in full?

0 votes
0 answers
25 views

Cracking password with static prefix and suffix

1 vote
1 answer
90 views

Potential problems with insecure password hashing

Browse more Questions