User Jeffrey Goldberg

97 votes

Is "the oft-cited XKCD scheme [...] no longer good advice"?

passwords

answered Jul 10, 2014 at 22:20

95 votes

How safe are password managers like LastPass?

passwords password-management

answered Nov 9, 2013 at 20:03

35 votes

Accepted

Is it safe to store 2FA tokens together with passwords in 1password?

passwords multi-factor account-security

answered Sep 22, 2018 at 21:45

31 votes

How do very big companies manage their most important passwords / keys?

passwords password-management secrets-management

answered Jul 28, 2020 at 18:40

20 votes

How many rounds of hashing is enough for a password manager?

passwords hash password-management secure-coding

answered Jun 29, 2018 at 20:57

17 votes

Any hints for programming my own password manager?

encryption passwords password-management programming

answered Dec 3, 2018 at 5:02

14 votes

Is it reasonable to use KeePassXC with YubiKey?

passwords yubikey

answered Jan 13, 2019 at 18:39

14 votes

How to generate dictionary for a dictionary attack?

passwords brute-force dictionary

answered Sep 11, 2013 at 4:51

11 votes

How to strike a balance between security policies and practical implementation challenges?

passwords password-policy corporate-policy password-reset

answered Jul 2, 2018 at 2:07

10 votes

Is 1Password more secure than an AES encrypted text file?

passwords password-management aes

answered Aug 24, 2013 at 16:35

10 votes

Two passwords provide better security than two-factor authentication?

passwords multi-factor

answered Nov 18, 2015 at 16:13

9 votes

At what length does a password stop making sense?

passwords

answered Dec 9, 2013 at 6:49

9 votes

How safe is it to put your 1password file on Dropbox?

password-management

answered Oct 17, 2016 at 15:16

9 votes

Explain BCrypt like I'm 5

encryption passwords bcrypt blowfish

answered Mar 27, 2019 at 20:11

8 votes

Accepted

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

password-management aes cbc

answered Dec 3, 2021 at 7:31

8 votes

Accepted

Why do email that didn't pass SPF checks go to my mailbox?

spam spoofing smtp dkim

answered Feb 29, 2016 at 5:31

7 votes

1Password for team how secure it is?

encryption passwords password-management synchronization

answered Feb 28, 2016 at 22:47

7 votes

Does removing my security questions on Yahoo make me more secure?

passwords secret-questions

answered Oct 1, 2016 at 3:24

7 votes

Accepted

How should a webmaster manage all her passwords and keys?

web-application passwords appsec

answered Aug 30, 2013 at 19:14

7 votes

Accepted

Is it possible to find who posted comment on my blogspot anonymously?

web-application anonymity user-tracking

answered Sep 4, 2013 at 5:43

7 votes

Password manager: safer on laptop or on smartphone?

passwords password-management smartphone passphrase desktop

answered May 8, 2017 at 17:42

6 votes

Accepted

How does a shared vault in password managers such as 1Password work?

passwords password-management

answered Jul 17, 2020 at 5:48

6 votes

What is the entropy of a password made with pwgen?

passwords entropy unix

answered Oct 6, 2015 at 17:01

5 votes

How does a key file increase the security of a password manager?

password-management keepass

answered Oct 20, 2013 at 5:30

5 votes

Accepted

Want to build a password manager using OpenPGP.js

web-browser password-management javascript

answered Jul 20, 2014 at 17:10

5 votes

Password Security and ocl-Hashcat-plus

passwords hash password-cracking password-policy hashcat

answered Aug 30, 2013 at 4:18

5 votes

BCrypt vs PBKDF2-SHA256

passwords password-management bcrypt sha256 pbkdf2

answered Apr 3, 2020 at 18:52

5 votes

Exactly how is a pseudorandom number generator a security risk?

passwords exploit random

answered Apr 26, 2019 at 18:40

5 votes

Accepted

Can password managers read my secure data? If no, how does sharing work under the hood?

passwords password-management aes

answered Dec 18, 2020 at 7:25

5 votes

Accepted

How to make sure that a password manager is not malicious?

password-management

answered Apr 13, 2017 at 16:42

Stack Exchange Network

current community

your communities

more stack exchange communities

69 Answers

Is "the oft-cited XKCD scheme [...] no longer good advice"?

How safe are password managers like LastPass?

Is it safe to store 2FA tokens together with passwords in 1password?

How do very big companies manage their most important passwords / keys?

How many rounds of hashing is enough for a password manager?

Any hints for programming my own password manager?

Is it reasonable to use KeePassXC with YubiKey?

How to generate dictionary for a dictionary attack?

How to strike a balance between security policies and practical implementation challenges?

Is 1Password more secure than an AES encrypted text file?

Two passwords provide better security than two-factor authentication?

At what length does a password stop making sense?

How safe is it to put your 1password file on Dropbox?

Explain BCrypt like I'm 5

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

Why do email that didn't pass SPF checks go to my mailbox?

1Password for team how secure it is?

Does removing my security questions on Yahoo make me more secure?

How should a webmaster manage all her passwords and keys?

Is it possible to find who posted comment on my blogspot anonymously?

Password manager: safer on laptop or on smartphone?

How does a shared vault in password managers such as 1Password work?

What is the entropy of a password made with pwgen?

How does a key file increase the security of a password manager?

Want to build a password manager using OpenPGP.js

Password Security and ocl-Hashcat-plus

BCrypt vs PBKDF2-SHA256

Exactly how is a pseudorandom number generator a security risk?

Can password managers read my secure data? If no, how does sharing work under the hood?

How to make sure that a password manager is not malicious?