5 votes
Accepted

Should newly password links reset old ones? if so, why?

One simple non-security reason is that it lets you have a single field in your Users table for "password reset token" which is populated when it's valid and generating a new one for a given ...
CBHacking's user avatar
  • 46.4k
1 vote
Accepted

Migrating Large Export of Dashlane, 1password, lastpass data to another password manager. Delete old sites?

How you should address services flagged as compromised is independent of migration. Although it might feel like the right time to tidy things up, I would recommend separating the tasks. Migration ...
Jeffrey Goldberg's user avatar
1 vote

Sending secret API Keys via email

In my experience, that is not normal. There are a few reasons I can think of. I have never encountered that with any large provider (eg, Amazon Web Services, Google, Facebook), so it is atypical in ...
tau's user avatar
  • 407

Only top scored, non community-wiki answers of a minimum length are eligible