Articles & Guides
Useful resources for web developers and system administrators
Found 68 · Security · Reset
Security
How to Check If Your Password Leaked Without Handing It Over
Why a leaked password beats a weak one, how the k-anonymity check works, why only five hash characters are sent, and what to do when it is found.
Security
Passphrase vs Password: How Many Words and How to Pick
How passphrase strength is calculated, why five words give 65 bits, where a phrase beats an ordinary password and where it loses. Diceware explained plainly.
Security
How to Create a Strong Password: Why Inventing One Fails
Why a human-invented password is nearly always predictable, what entropy means, why length beats symbols, and how to get a genuinely random password.
Security
How to Store Passwords Safely: Six Methods and Weak Points
Memory, paper, notes, the browser, a spreadsheet, a password manager — what each protects against and what has to happen for the password to leak.
Security
How Often to Change Your Password: the 90-Day Rule Is Gone
NIST removed scheduled password expiry in 2017. Why the calendar makes passwords more predictable, when a change is genuinely required, and what helps more.
Security
Where Is My Password Manager? Chrome, iPhone, Android, Edge
Find saved passwords: chrome://password-manager in Chrome, about:logins in Firefox, Settings, Passwords on iPhone, Google Password Manager on Android.
Security
JWT token explained: structure, decoding, and verification
JWT token explained: header.payload.signature structure, how to decode a JWT locally or online, why decoding is not verification, classic mistakes and attacks.
Security
Advertising Disclosure: What Counts as an Ad and erid Basics
What counts as advertising on a website, who is responsible for the label, where the erid token goes, and which technical mistakes leave a live page unlabelled.
Security
SSH Key Authentication: Setup, authorized_keys, No Passwords
Set up SSH key login: ssh-keygen -t ed25519, ssh-copy-id, 700/600 permissions, PasswordAuthentication no, and fixes for Permission denied (publickey).
Security
Hosting for Russian Users: Data Localisation Requirements
Why a Russian audience forces data residency: which sites must host locally, how the provider registry works, and how it compares with GDPR transfers.