user avatar
user avatar
user avatar
PwdRsch
  • Member for 8 years
  • Last seen this week
357 votes
Accepted

Is there any reason to not show users incorrectly entered passwords after a successful login?

66 votes
Accepted

Generic error message for wrong password or username - is this really helpful?

58 votes
Accepted

What maximum password length to choose when using bcrypt?

54 votes
Accepted

Why would a password requirement prohibit a number in the last character?

35 votes
Accepted

Correct terminology when describing password security to layman

30 votes
Accepted

What is the point in having arbitrary username requirements?

22 votes
Accepted

Do keystroke dynamics always generate one profile per person?

20 votes

What person should I write a penetration test report as?

19 votes
Accepted

Are HTTP brute-force password-guessing attacks common nowadays?

13 votes
Accepted

Is there a better Diceware word list?

11 votes
Accepted

Is KeePass's method for key derivation secure?

10 votes
Accepted

Why do so many banks have relatively weak e-banking security?

9 votes

Sequential password updates

8 votes
Accepted

Are newly-generated recovery passwords sent to me via email hashed?

8 votes
Accepted

Why is the Store Passwords with reversible encryption option even there?

7 votes
Accepted

Should I let users pick their own secret questions for password reset?

7 votes
Accepted

Why is the HTTP Server header not used by most servers, but the User agent used by most browsers?

6 votes

Is a biometric eye scan more secure than a multi-factor authentication

6 votes

Four-factor authentication

6 votes

What are factors in evaluating the fitness of a security questions?

5 votes
Accepted

John the Ripper password cracker is viable?

5 votes
Accepted

Crackstation "Secure Salted Password" Java example - is it really secure?

5 votes
Accepted

Password managers with U2F security risks

5 votes
Accepted

Multi-Single-Factor vs. Multi-Factor Authentication

4 votes
Accepted

Kerberos Protocol

4 votes
Accepted

Is this passport survey website legitimate?

4 votes

Are bad passwords used to breach security in real life?

4 votes

How many passwords does the average user know?

4 votes
Accepted

PCI DSS minimum password strength equivalent in passphrase

4 votes
Accepted

Does password expiry provide any benefit at all (when using randomly generated passwords)?