Home

Welcome to the Comeonin wiki.

On this page, we provide useful links to password-related information. Most of this information is already in the documentation, but these links contain the sources of this information, which might be useful if you want to study any of these matters further.

For information about Argon2, see this page.

Bcrypt

• A future-adaptable password scheme

Pbkdf2

• Pbkdf2
• Key stretching

NIST recommendations

• Digital authentication guideline - DRAFT
• Electronic authentication guideline

Password strength

• Choosing secure passwords
• Writing down passwords
• Measuring password strength
• Password memorability and security
• Testing password creation policies
• Passwords strength: characters vs. words
• From very weak to very strong: Analyzing password-strength meters

Password managers

• The Emperor’s New Password Manager: Security Analysis of Web-based Password Managers
• Password managers: attacks and defenses

Changing passwords

• Security and password expiration

User attitudes / user compliance

• User attitudes to password policies
• Unusable password policies
• What users know and what they actually do
• How does your password measure up: the effect of strength meters on password creation