Passwords
7 articles
Passwords remain the most attacked credential on the internet. These guides explain how password cracking, credential stuffing, and brute-force attacks work, why modern hashing (Argon2id, bcrypt) and salting matter, and how password managers, passphrases, and multi-factor authentication keep accounts safe.
Bitwarden Review: Is It Still the Default Pick?
A full review of Bitwarden: the KDF default that took three years to reach existing vaults, the April 2026 CLI supply-chain compromise, the price that doubled, and who should still use it.
FIDO2 vs WebAuthn vs Passkeys: What Each Name Means
Three names, one stack. FIDO2 is the umbrella, WebAuthn is the browser API, CTAP is the protocol to the authenticator, and a passkey is a credential type. What each actually refers to.
Best Hardware Security Keys (FIDO2)
Ranking of FIDO2 security keys, YubiKey 5, Bio, Google Titan, Token2, Nitrokey, Thetis. Phishing-resistant 2FA and passkeys, tested.
Best Password Managers: Ranked by Security
We ranked Bitwarden, 1Password, Proton Pass, NordPass and more by cryptographic design, audits, and KDF strength.
How Passwords Get Cracked
A technical breakdown of password storage, cracking techniques, and the math behind why most passwords fail, plus what actually works for defense.
Password Managers: Why You Need One and How to Choose
You can't remember 200 unique passwords. A password manager is the single highest-impact security tool for most people. Here's how to pick and use one.
How to Set Up Two-Factor Authentication (2FA) Properly
2FA is your best defense against account takeover. Learn the different types, which to avoid, and how to set it up on every account that matters.