Royce Williams's user avatar
Royce Williams's user avatar
Royce Williams's user avatar
Royce Williams
  • Member for 12 years, 4 months
  • Last seen this week
125 votes
Accepted

Is a redirect showing the password in plain text a security vulnerability?

92 votes
Accepted

Is bcrypt(strtolower(hex(md5(pass)))) ok for storing passwords?

48 votes

Which password policy is more secure: one password of length 9 vs. two passwords each of length 8?

31 votes
Accepted

After a password leak, is there a Levenshtein distance from which one a newly derivated password can be considered safe?

30 votes

Is it better to use an unsuitable hashing algorithm instead of none at all?

23 votes
Accepted

How secure is BCRYPT(SHA1(Password))

21 votes

How long would it take to brute force an 11 character single-case alphanumeric password?

20 votes

Strength of passwords with patterns

17 votes

Why use entropy at all in considering password strength?

14 votes

How to strike a balance between security policies and practical implementation challenges?

14 votes
Accepted

Why do salts for hashing passwords need to be globally unique, not just system/site-unique?

13 votes

Argon2 vs SHA-512, what's better in my case?

12 votes

Is it safe to store a password using a secure hash followed by an insecure hash?

12 votes

Why would password managers provide support for OTP codes?

10 votes

How do Yubikeys improve security if I am typically also forced to enable other, weaker 2FA methods?

10 votes

Which is faster - brute-forcing, or using a dictionary attack that contains all possible permutations?

9 votes

What vulnerabilities could be caused by a wildcard SSL cert?

9 votes
Accepted

Find salt from md5 hash if password is known

9 votes

hashcat - is there a way to set minimum password length?

9 votes

Is password information dumped from the MySQL user table sensitive?

8 votes
Accepted

Hash list for practicing password cracking

8 votes

LM (Lan Manager) Hash - Brute Force Failing

8 votes
Accepted

How to read password from Windows credentials?

8 votes
Accepted

Can you use an FPGA with hashcat?

7 votes

How to crack 10 digits with prefix password in John the Ripper?

7 votes
Accepted

Attack WPA password with hashcat - Settings and resources for "german" passwords?

7 votes

How do I bruteforce a WPA2 password given the following conditions?

7 votes
Accepted

Bruteforce with hashcat, how to set the mask properly?

7 votes
Accepted

Details of a good WPA2 pre-shared key (password)?

7 votes
Accepted

An idea for a universal password management standard

1
2 3 4 5 6