Krebs on Security

SEPTEMBER 22, 2023

The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest security improvements. Nor was he ever forced to improve his master password. And very recently, it upped that again to 600,000.

Passwords 272

Passwords Encryption Password Management Cryptocurrency 272

Troy Hunt

JULY 8, 2019

Almost 2 years ago to the day, I wrote about Passwords Evolved: Authentication Guidance for the Modern Era. This wasn't so much an original work on my behalf as it was a consolidation of advice from the likes of NIST, the NCSC and Microsoft about how we should be doing authentication today. 3,768,890 passwords.

Passwords 233

Passwords Accountability Authentication Data breaches 233

Troy Hunt

NOVEMBER 14, 2018

Last week I wrote a couple of different pieces on passwords, firstly about why we're going to be stuck with them for a long time yet and then secondly, about how we all bear some responsibility for making good password choices. This week, I wanted to focus on going beyond passwords and talk about 2FA. It's a subset of MFA.

Passwords 259

Passwords Authentication Accountability Mobile 259

SecureWorld News

MARCH 10, 2021

GitHub announced a security update due to a bug causing issues with the authentication of sessions. On March 2, GitHub received an external report of anomalous behavior for their authenticated GitHub.com user session. This would give them the valid and authenticated session cookie for another user.

Authentication 76

Authentication CSO Accountability Engineering 76

Identity IQ

MAY 2, 2023

What are the Benefits of a Password Manager? IdentityIQ Passwords are essential when keeping your information safe on your devices. But unfortunately, many people use weak or the same password, making it easy for hackers to crack them. Research shows that 52% of people reuse passwords for multiple accounts.

Password Management 52

Password Management Passwords Identity Theft Accountability 52

NetSpi Technical

JANUARY 18, 2024

Time-Based One-Time Password (TOTP) Time-Based One-Time Password (TOTP) is a common two-factor authentication (2FA) mechanism used across the internet. During authentication, the secret is used in combination with the time in a cryptographic hash function to produce a secure 6-digit passcode. Why yes, it did.

Authentication 115

Authentication Passwords Accountability Penetration Testing 115

eSecurity Planet

OCTOBER 11, 2021

Company officials also used the first week of October – which is Cybersecurity Awareness Month – to remind users of the company’s plan to enable two-factor authentication by default to many accounts, and that it will enable it for 150 million accounts before the end of 2021. ” Two-Factor Authentication is Key.

Risk 135

Risk Passwords Authentication Accountability 135