Product
11 articles filed under product.
- How to make a strong password: length, characters and entropy A strong password is one that was generated, not invented. How length and character sets turn into entropy, how long a password should be, and which characters to leave out. Practice
- What is a passphrase, and how many words does it need? A passphrase is a string of random words: as strong as a random password and far easier to type or read aloud. How many words you need, why they must be random, and where a passphrase beats a password. Concepts
- Static vs dynamic QR codes, and how to make one that scans A static QR code holds your link itself and never expires; a dynamic one routes every scan through someone else. Which to use, what a QR code can hold, and how colour, size and contrast decide whether it scans. Practice
- What is a phishing link? How to check before you click A phishing link imitates a service you trust in order to take your credentials. The signs worth checking, in order, and why a genuine one-time secret link trips some of the same alarms. Practice
- One-time secret vs one-time password: what is the difference? A one-time password is a login code that proves who you are. A one-time secret is a link that delivers a credential to someone else, once. Same name, opposite jobs. Concepts
- How to share a WiFi password (and when not to) The fastest way to share a WiFi password depends on whether the person is standing next to you. Phone-to-phone sharing, guest networks, finding a password you have forgotten, and what to do for someone remote. Practice
- How to share credentials with contractors Contractors sit outside your password manager and their access has an end date. A practical process for granting, handing over and revoking credentials. Practice
- The best ways to share passwords securely A ranked, honest guide to sharing passwords with colleagues and clients: what to use for ongoing access, what to use for a one-off handover, and what to stop doing. Concepts
- What is a one-time password link? A one-time password link sends a password or API key through a URL that self-destructs after it is read. How they work, and when to use one. Concepts
- Out of band, in plain language The phrase comes from telephone engineering and gets used loosely in security. What it means here is narrow and useful. Concepts
- Why there is no account, and what we give up for it No login means no audit trail, no revocation list and no delivery confirmation. That trade is deliberate. Product