User Jeffrey Goldberg

98 votes

Is "the oft-cited XKCD scheme [...] no longer good advice"?

answered Jul 10, 2014 at 22:20

95 votes

How safe are password managers like LastPass?

answered Nov 9, 2013 at 20:03

38 votes

Accepted

Is it safe to store 2FA tokens together with passwords in 1password?

answered Sep 22, 2018 at 21:45

31 votes

How do very big companies manage their most important passwords / keys?

answered Jul 28, 2020 at 18:40

20 votes

How many rounds of hashing is enough for a password manager?

answered Jun 29, 2018 at 20:57

17 votes

Any hints for programming my own password manager?

answered Dec 3, 2018 at 5:02

14 votes

How to generate dictionary for a dictionary attack?

answered Sep 11, 2013 at 4:51

13 votes

Is it reasonable to use KeePassXC with YubiKey?

answered Jan 13, 2019 at 18:39

11 votes

How to strike a balance between security policies and practical implementation challenges?

answered Jul 2, 2018 at 2:07

10 votes

Is 1Password more secure than an AES encrypted text file?

answered Aug 24, 2013 at 16:35

10 votes

Two passwords provide better security than two-factor authentication?

answered Nov 18, 2015 at 16:13

9 votes

At what length does a password stop making sense?

answered Dec 9, 2013 at 6:49

9 votes

How safe is it to put your 1password file on Dropbox?

answered Oct 17, 2016 at 15:16

9 votes

Accepted

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

answered Dec 3, 2021 at 7:31

9 votes

Explain BCrypt like I'm 5

answered Mar 27, 2019 at 20:11

8 votes

1Password for team how secure it is?

answered Feb 28, 2016 at 22:47

8 votes

Accepted

Why do email that didn't pass SPF checks go to my mailbox?

answered Feb 29, 2016 at 5:31

7 votes

Does removing my security questions on Yahoo make me more secure?

answered Oct 1, 2016 at 3:24

7 votes

Accepted

How should a webmaster manage all her passwords and keys?

answered Aug 30, 2013 at 19:14

7 votes

Accepted

Is it possible to find who posted comment on my blogspot anonymously?

answered Sep 4, 2013 at 5:43

7 votes

Accepted

How does a shared vault in password managers such as 1Password work?

answered Jul 17, 2020 at 5:48

7 votes

Password manager: safer on laptop or on smartphone?

answered May 8, 2017 at 17:42

6 votes

BCrypt vs PBKDF2-SHA256

answered Apr 3, 2020 at 18:52

6 votes

What is the entropy of a password made with pwgen?

answered Oct 6, 2015 at 17:01

5 votes

How does a key file increase the security of a password manager?

answered Oct 20, 2013 at 5:30

5 votes

Accepted

Want to build a password manager using OpenPGP.js

answered Jul 20, 2014 at 17:10

5 votes

Password Security and ocl-Hashcat-plus

answered Aug 30, 2013 at 4:18

5 votes

Exactly how is a pseudorandom number generator a security risk?

answered Apr 26, 2019 at 18:40

5 votes

Accepted

Can password managers read my secure data? If no, how does sharing work under the hood?

answered Dec 18, 2020 at 7:25

5 votes

Accepted

How to make sure that a password manager is not malicious?

answered Apr 13, 2017 at 16:42

Stack Exchange Network

70 Answers

Is "the oft-cited XKCD scheme [...] no longer good advice"?

How safe are password managers like LastPass?

Is it safe to store 2FA tokens together with passwords in 1password?

How do very big companies manage their most important passwords / keys?

How many rounds of hashing is enough for a password manager?

Any hints for programming my own password manager?

How to generate dictionary for a dictionary attack?

Is it reasonable to use KeePassXC with YubiKey?

How to strike a balance between security policies and practical implementation challenges?

Is 1Password more secure than an AES encrypted text file?

Two passwords provide better security than two-factor authentication?

At what length does a password stop making sense?

How safe is it to put your 1password file on Dropbox?

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

Explain BCrypt like I'm 5

1Password for team how secure it is?

Why do email that didn't pass SPF checks go to my mailbox?

Does removing my security questions on Yahoo make me more secure?

How should a webmaster manage all her passwords and keys?

Is it possible to find who posted comment on my blogspot anonymously?

How does a shared vault in password managers such as 1Password work?

Password manager: safer on laptop or on smartphone?

BCrypt vs PBKDF2-SHA256

What is the entropy of a password made with pwgen?

How does a key file increase the security of a password manager?

Want to build a password manager using OpenPGP.js

Password Security and ocl-Hashcat-plus

Exactly how is a pseudorandom number generator a security risk?

Can password managers read my secure data? If no, how does sharing work under the hood?

How to make sure that a password manager is not malicious?