Passwords

Cybersecurity 4 min NIST forbids the password rules most companies still enforce Character-mix requirements and ninety-day expiry are not NIST recommendations that have gone out of fashion. T... KE Kenji Tanaka 13 Sep Developer Tools 5 min How to Self-Host Vaultwarden with Docker The compose file is trivial. The admin token is not: it wants an Argon2 hash rather than a password, and the h... KE Kenji Tanaka 31 Aug Cybersecurity 9 min Account Security You Can Finish in an Afternoon Four jobs, ordered by how much loss each one prevents, with the arguments settled by the standard rather than... CY Cyber Team 1 Aug Cybersecurity 10 min Cybersecurity for a Small ASEAN Business Until this week our own password checker rated Summer2026 as Fair. It is not fair — it is one of the first few... JE Jeffrey Tan 29 Jul Cybersecurity 22 min Which Hash for What: MD5, SHA-256, and the Password Mistake "MD5 is broken, so hash your passwords with SHA-256 instead" gets both halves wrong, in opposite directions. W... CY Cyber Team 25 Jul Cybersecurity 12 min That 30-Second Code: How Authenticator Apps Actually Work (2026) The six digits in your authenticator app come from two short public standards. We walk the algorithm step by s... CY Cyber Team 22 Jul Cybersecurity 12 min Passkeys Explained: What Actually Replaces Your Passwords (2026) What a passkey is per the WebAuthn spec, NIST's synced vs device-bound line, recovery on Apple, Google and Win... CY Cyber Team 22 Jul Cybersecurity 14 min How to Build a Password System That Actually Holds (2026) NIST's 2025 rewrite raised the password floor to 15 characters and killed forced rotation. Rebuild your logins... CY Cyber Team 21 Jul