User Jeffrey Goldberg

99 votes

Is "the oft-cited XKCD scheme [...] no longer good advice"?

answered Jul 10, 2014 at 22:20

96 votes

How safe are password managers like LastPass?

answered Nov 9, 2013 at 20:03

43 votes

Accepted

Is it safe to store 2FA tokens together with passwords in 1password?

answered Sep 22, 2018 at 21:45

40 votes

Accepted

Why is 1Password sign-in to new device secure without MFA?

answered Feb 9 at 15:47

32 votes

How do very big companies manage their most important passwords / keys?

answered Jul 28, 2020 at 18:40

20 votes

How many rounds of hashing is enough for a password manager?

answered Jun 29, 2018 at 20:57

18 votes

Any hints for programming my own password manager?

answered Dec 3, 2018 at 5:02

15 votes

Is it reasonable to use KeePassXC with YubiKey?

answered Jan 13, 2019 at 18:39

14 votes

How to generate dictionary for a dictionary attack?

answered Sep 11, 2013 at 4:51

11 votes

Is 1Password more secure than an AES encrypted text file?

answered Aug 24, 2013 at 16:35

11 votes

How to strike a balance between security policies and practical implementation challenges?

answered Jul 2, 2018 at 2:07

11 votes

Accepted

How does a shared vault in password managers such as 1Password work?

answered Jul 17, 2020 at 5:48

10 votes

Accepted

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

answered Dec 3, 2021 at 7:31

10 votes

Two passwords provide better security than two-factor authentication?

answered Nov 18, 2015 at 16:13

9 votes

At what length does a password stop making sense?

answered Dec 9, 2013 at 6:49

9 votes

Explain BCrypt like I'm 5

answered Mar 27, 2019 at 20:11

9 votes

How safe is it to put your 1password file on Dropbox?

answered Oct 17, 2016 at 15:16

8 votes

1Password for team how secure it is?

answered Feb 28, 2016 at 22:47

8 votes

Accepted

Why do email that didn't pass SPF checks go to my mailbox?

answered Feb 29, 2016 at 5:31

7 votes

Does removing my security questions on Yahoo make me more secure?

answered Oct 1, 2016 at 3:24

7 votes

Accepted

How should a webmaster manage all her passwords and keys?

answered Aug 30, 2013 at 19:14

7 votes

Password manager: safer on laptop or on smartphone?

answered May 8, 2017 at 17:42

6 votes

BCrypt vs PBKDF2-SHA256

answered Apr 3, 2020 at 18:52

6 votes

Accepted

Is it possible to find who posted comment on my blogspot anonymously?

answered Sep 4, 2013 at 5:43

6 votes

What is the entropy of a password made with pwgen?

answered Oct 6, 2015 at 17:01

5 votes

How does a key file increase the security of a password manager?

answered Oct 20, 2013 at 5:30

5 votes

Accepted

Want to build a password manager using OpenPGP.js

answered Jul 20, 2014 at 17:10

5 votes

Password Security and ocl-Hashcat-plus

answered Aug 30, 2013 at 4:18

5 votes

Exactly how is a pseudorandom number generator a security risk?

answered Apr 26, 2019 at 18:40

5 votes

Accepted

Can password managers read my secure data? If no, how does sharing work under the hood?

answered Dec 18, 2020 at 7:25

Stack Exchange Network

77 Answers

Is "the oft-cited XKCD scheme [...] no longer good advice"?

How safe are password managers like LastPass?

Is it safe to store 2FA tokens together with passwords in 1password?

Why is 1Password sign-in to new device secure without MFA?

How do very big companies manage their most important passwords / keys?

How many rounds of hashing is enough for a password manager?

Any hints for programming my own password manager?

Is it reasonable to use KeePassXC with YubiKey?

How to generate dictionary for a dictionary attack?

Is 1Password more secure than an AES encrypted text file?

How to strike a balance between security policies and practical implementation challenges?

How does a shared vault in password managers such as 1Password work?

What algorithm does 1Password use for encryption, AES-GCM-256 or AES-CBC-256?

Two passwords provide better security than two-factor authentication?

At what length does a password stop making sense?

Explain BCrypt like I'm 5

How safe is it to put your 1password file on Dropbox?

1Password for team how secure it is?

Why do email that didn't pass SPF checks go to my mailbox?

Does removing my security questions on Yahoo make me more secure?

How should a webmaster manage all her passwords and keys?

Password manager: safer on laptop or on smartphone?

BCrypt vs PBKDF2-SHA256

Is it possible to find who posted comment on my blogspot anonymously?

What is the entropy of a password made with pwgen?

How does a key file increase the security of a password manager?

Want to build a password manager using OpenPGP.js

Password Security and ocl-Hashcat-plus

Exactly how is a pseudorandom number generator a security risk?

Can password managers read my secure data? If no, how does sharing work under the hood?