user avatar
user avatar
user avatar
Jeffrey Goldberg
  • Member for 9 years, 3 months
  • Last seen more than a week ago
97 votes

Is "the oft-cited XKCD scheme [...] no longer good advice"?

95 votes

How safe are password managers like LastPass?

35 votes
Accepted

Is it safe to store 2FA tokens together with passwords in 1password?

31 votes

How do very big companies manage their most important passwords / keys?

20 votes

How many rounds of hashing is enough for a password manager?

17 votes

Any hints for programming my own password manager?

14 votes

Is it reasonable to use KeePassXC with YubiKey?

14 votes

How to generate dictionary for a dictionary attack?

11 votes

How to strike a balance between security policies and practical implementation challenges?

10 votes

Is 1Password more secure than an AES encrypted text file?

10 votes

Two passwords provide better security than two-factor authentication?

9 votes

At what length does a password stop making sense?

9 votes

How safe is it to put your 1password file on Dropbox?

9 votes

Explain BCrypt like I'm 5

8 votes
Accepted

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

8 votes
Accepted

Why do email that didn't pass SPF checks go to my mailbox?

7 votes

1Password for team how secure it is?

7 votes

Does removing my security questions on Yahoo make me more secure?

7 votes
Accepted

How should a webmaster manage all her passwords and keys?

7 votes
Accepted

Is it possible to find who posted comment on my blogspot anonymously?

7 votes

Password manager: safer on laptop or on smartphone?

6 votes
Accepted

How does a shared vault in password managers such as 1Password work?

6 votes

What is the entropy of a password made with pwgen?

5 votes

How does a key file increase the security of a password manager?

5 votes
Accepted

Want to build a password manager using OpenPGP.js

5 votes

Password Security and ocl-Hashcat-plus

5 votes

BCrypt vs PBKDF2-SHA256

5 votes

Exactly how is a pseudorandom number generator a security risk?

5 votes
Accepted

Can password managers read my secure data? If no, how does sharing work under the hood?

5 votes
Accepted

How to make sure that a password manager is not malicious?