https://tomasz.jarosik.online/tags/passwords/Recent content in Passwords on Tomasz Jarosik blogHugoen-usSat, 22 Jan 2022 00:00:00 +0000https://tomasz.jarosik.online/posts/online-security/Sat, 22 Jan 2022 00:00:00 +0000https://tomasz.jarosik.online/posts/online-security/<p>I’ve recently discovered two great papers about password security. Both from Google. One is for users and one for system designers. We all use passwords so I consider the one addressed to users a must-read for (almost) everyone. I include here just best practices, to give you a snippet of what’s inside them.</p> <h2 id="for-users">For users</h2> <p><a href="https://cloud.google.com/solutions/modern-password-security-for-users.pdf">https://cloud.google.com/solutions/modern-password-security-for-users.pdf</a></p> <p><img alt="security-for-users.png" loading="lazy" src="https://tomasz.jarosik.online/images/security-for-users.png"></p> <h2 id="for-system-designers">For system designers</h2> <p><a href="https://cloud.google.com/solutions/modern-password-security-for-system-designers.pdf">https://cloud.google.com/solutions/modern-password-security-for-system-designers.pdf</a></p> <p><img alt="security-for-designers.png" loading="lazy" src="https://tomasz.jarosik.online/images/security-for-designers.png"></p> <p>There is a nice demo provided by a password manager (in this case Bitwarden) to see how password encryption works behind the scenes: <a href="https://bitwarden.com/crypto">https://bitwarden.com/crypto</a></p>