Information Security
Meta user
Network profile
8,153
reputation
1
25
35

PwdRsch

Hi, I'm Bruce K. Marshall. I've been conducting and gathering research on passwords and authentication systems since the late 90's. I started the PasswordResearch.com site as a way to share my collection of information and to encourage more collaboration between academics and IT practitioners.

I'm here to continue learning about the questions and problems people have with authentication as well as contributing my own experiences. You can also find me on Twitter @PwdRsch.

90
answers
1
question
~226k
people reached

Communities (7)

Top Meta Posts
2
0

Top network posts

We respect a laser-like focus on one topic.

Top tags (88)

Score 703
Posts 39
Posts % 43
Score 505
Posts 20
Score 161
Posts 10
Score 56
Posts 7
Score 35
Posts 8
Score 22
Posts 8
View all tags →

Top posts (91) All Questions Answers | Votes Newest

355 Is there any reason to not show users incorrectly entered passwords after a successful login? Sep 9 '16
61 Generic error message for wrong password or username - is this really helpful? Jul 7 '14
58 What maximum password length to choose when using bcrypt? Feb 26 '17
54 Why would a password requirement prohibit a number in the last character? Oct 14 '16
35 Correct terminology when describing password security to layman May 31 '16
34 How to prevent username and password matches when changing a username? Mar 7 '16
30 What is the point in having arbitrary username requirements? Aug 29 '14
22 Do keystroke dynamics always generate one profile per person? Sep 16 '16
20 What person should I write a penetration test report as? Jan 27 '16
19 Are HTTP brute-force password-guessing attacks common nowadays? Sep 30 '16
View all questions and answers →

Badges (61)

Gold

1

Rarest

Silver

25

Rarest

Bronze

35

Rarest

View all badges →