Encoding Is Not Encryption: Base64, Percent-Encoding and the Confusion That Leaks Data
The RFC that defines Base64 says in its own Security Considerations that base encoding "visually hides" a password but "...
Guides & How-tos · Worked examples · Real numbers
Step-by-step how-tos, head-to-head comparisons and honest roundups — every guide worked through with current figures, then backed by a RECATOOLS calculator or AI-directory entry so you can act on it.
The RFC that defines Base64 says in its own Security Considerations that base encoding "visually hides" a password but "...
"MD5 is broken, so hash your passwords with SHA-256 instead" gets both halves wrong, in opposite directions. What broke...
DoT, DoH and DoQ encrypt your DNS queries, but destination IPs, the TLS SNI and your resolver still see plenty. What the...
The six digits in your authenticator app come from two short public standards. We walk the algorithm step by step and un...
What a passkey is per the WebAuthn spec, NIST's synced vs device-bound line, recovery on Apple, Google and Windows, and...
NIST's 2025 rewrite raised the password floor to 15 characters and killed forced rotation. Rebuild your logins with a pa...
Consumer AI tiers train on your data; business tiers don't. A 10-minute vetting workflow for SMEs, with ASEAN PDPA ancho...