Articles & Guides
Useful resources for web developers and system administrators
Found 67 · Security · Reset
Security
Passphrase vs Password: How Many Words and How to Pick
How passphrase strength is calculated, why five words give 65 bits, where a phrase beats an ordinary password and where it loses. Diceware explained plainly.
Security
How to Create a Strong Password: Why Inventing One Fails
Why a human-invented password is nearly always predictable, what entropy means, why length beats symbols, and how to get a genuinely random password.
Security
How to Store Passwords Safely: Six Methods and Weak Points
Memory, paper, notes, the browser, a spreadsheet, a password manager — what each protects against and what has to happen for the password to leak.
Security
How Often to Change Your Password: the 90-Day Rule Is Gone
NIST removed scheduled password expiry in 2017. Why the calendar makes passwords more predictable, when a change is genuinely required, and what helps more.
Security
Password Manager: Where to Find It in Your Browser and Phone
Where the password manager lives in Chrome, Firefox, Edge, Safari, Android and iPhone, how to reveal a saved password, and why it beats letting the browser remember.
Security
JWT token explained: structure, decoding, and verification
JWT token explained: header.payload.signature structure, how to decode a JWT locally or online, why decoding is not verification, classic mistakes and attacks.
Security
Advertising Disclosure: What Counts as an Ad and erid Basics
What counts as advertising on a website, who is responsible for the label, where the erid token goes, and which technical mistakes leave a live page unlabelled.
Security
SSH Key Authentication: Generate, Install, Disable Passwords
How to generate an ed25519 SSH key, install it on a server, fix 700/600 permissions, disable password login and debug Permission denied (publickey) errors.
Security
Hosting for Russian Users: Data Localisation Requirements
Why a Russian audience forces data residency: which sites must host locally, how the provider registry works, and how it compares with GDPR transfers.
Security
fail2ban Setup: Jails and SSH Brute-Force Protection
How to install and configure fail2ban on Debian and Ubuntu: jail.local, bantime and maxretry, sshd and nginx jails, custom filters, unbanning and pitfalls.