When I first read about passkeys, I got super excited. Finally it seemed that we might truly have a “password killer” technology. Passkeys promised to be easier to use and more secure than passwords. It’s a rare thing in security when you can improve convenience and security simultaneously. However, as this cool new technology actually …
[UPDATE, Jan 11: I added some further resources to the bottom of the article. Check back periodically.] The recent LastPass breach notification is very troubling, though maybe not for the reasons you’d expect. This is going to be a long post, but I think it’s important to go through this thoroughly. NOTE: Even if you …
I’ve talked a lot about password managers, but I’ve mostly focused on generating and storing passwords. That frankly should be reason enough to use one. But there are many other great reasons for using a password vault. The key thing to understand is that password managers are just digital vaults. They can hold all sorts …
You shouldn’t know any of your passwords. You should only know one password: the master password for your password vault. That is, you should be using a password manager to generate, store and auto-fill super-strong passwords. There are other “passwordless” technologies on the horizon, but for now, passwords (with two-factor authentication) are still the best …
