3+ day, 23+ hour ago   (427+ words) Most security software marketing sounds the same: "military-grade encryption," "unbreakable," "100% secure." I want to try something different. I'm going to tell you about a real mistake in an earlier version of my app, ATLOCK, how I found it, and exactly…...

1+ week, 5+ day ago   (1206+ words) The password is in your password manager, exactly where it should be. The login prompt is on a different device. Perhaps you are preparing an Android device for a maintenance task. It needs one service password. You do not want…...

2+ week, 4+ day ago   (782+ words) This guide walks you through three critical compliance standards: GDPR (General Data Protection Regulation), HIPAA (Health Insurance Portability and Accountability Act), and SOC 2 (Service Organization Control 2). We'll explain what each standard requires, how it applies to password managers, and what…...

2+ week, 5+ day ago   (334+ words) When users register or change their passwords, security guidelines (like NIST SP 800-63B) recommend checking their chosen password against a database of known breached passwords. Data feeds like HaveIBeenPwned contain over 800 million leaked password hashes. Storing 800 million SHA-1 hashes (20 bytes each)…...

2+ week, 5+ day ago   (1142+ words) Either way, someone in the room asks the question we hear on almost every technical call about Passwork: "Is there a backdoor for this? A way to just unlock everything?" This post is about how we designed access recovery for…...

2+ week, 5+ day ago   (723+ words) ✓ Human-authored analysis; AI used for formatting and proofreading. The user retrieves a secret in seven API calls. No policy connects SNS to Secrets Manager. The connection is the credential value itself. Every step is individually authorized. The compound chain is…...

2+ week, 6+ day ago   (658+ words) Server-side architecture gets scrutinized for authentication vulnerabilities, data isolation between user accounts, and whether the service provider can actually access user data. Most zero-knowledge password managers claim that even they cannot decrypt your vault—audits verify this claim by examining…...

3+ week, 2+ day ago   (20+ words) Most password managers today are cloud-first products wearing a privacy costume. You create an... Tagged with privacy, security, password, reactnative....

3+ week, 4+ day ago   (688+ words) A password manager is supposed to protect all your passwords behind one master password. That creates an important security question: What happens if someone gets your master password? The answer depends on how the password manager is designed. That means…...

4+ week, 1+ day ago   (672+ words) Passwords were designed for a simpler threat model: one person, one device, one login screen. They work reasonably well against random guessing. They work poorly against phishing kits that clone login pages in minutes, credential-stuffing bots that test billions of…...