Authentication and Passwords
The trouble with decommissioning a used FIDO security key
You can’t throw out your worn-out USB security keys when you can’t recall what locks they’re for. Physical security tokens come with their own problems.
Authentication and Passwords
Authentication and Passwords
Norway’s BankID undermines anti-phishing best practices
An easily-spoofed iframe embedded onto every random online merchant’s websites is not a safe place to enter my bank password! Is it really BankID‽
Authentication and Passwords
Why KeePass instead of self-hosting Bitwarden
You can control your password manager with KeePass or a self-hosted Bitwarden Server. One is a simple password vault file and the other a complex server.
Authentication and Passwords
Your clipboard is only as secure as your device
A review/critique of the complexity, security, and unpredictable user experience of modern feature-laden copy–paste clipboards in today’s operating systems.
Authentication and Passwords
Be wary of file sync conflicts with KeePass apps on Android
An investigation and comparison into how KeePass-compatible password manager apps for Android handle external changes to an unlocked password vault database.
Authentication and Passwords
How to back up your password manager
Plan for the day your password manager stops working. Even if it’s a cloud service! Backing up your password manager is harder that it sounds.
Security
Feitian MultiPass recall highlights need to use multiple security keys
The recall of the Feitian MultiPass FIDO security key demonstrates why you always should use multiple security key products from different vendors.
Authentication and Passwords
Update after 3 months with Bitwarden
Bitwarden has fixed the security issues outlined in my Bitwarden review. I also discuss some missing features from LastPass and issues with the Android app.
Authentication and Passwords
Firefox, Security Keys, U2F, and Google Advanced Protection
How to use U2F security keys (USB A or C, Bluetooth, others) with Firefox and Google’s Advanced Account Protection program.
Authentication and Passwords
Why I migrated from LastPass to Bitwarden
Here’s why I stopped using LastPass and moved all my passwords and notes to the open-source Bitwarden password manager instead.
Authentication and Passwords
Topical leaks users’ email addresses and interests
Twitter-to-email-newsletter service Topical exposes its users’ subscriptions and interests through poor security practices.
Authentication and Passwords
I regret transferring my domains to Hover
Ads had promised me that Hover.com was a great domain registrar. Trusting them to handle my domains turned out to be a big mistake.