In-depth guides, tips, and tutorials on two-factor authentication and online security.
Billions of leaked passwords get replayed against every major website, automatically, around the clock. Here is how credential stuffing works and why unique passwords plus 2FA end it.
Read more →A SIM swap gives an attacker your phone number, your SMS codes, and often your entire digital life. Learn how the attack works and the settings that stop it.
Read more →Phishing steals more accounts than any hacking technique ever invented. Learn how attacks actually work, the red flags that expose them, and the habits that make you unphishable.
Read more →Crypto transactions are irreversible, which makes exchange accounts the highest value login you own. Here is the 2FA setup serious holders use, and the mistakes that empty wallets.
Read more →A plain-English glossary of every account security term worth knowing, from 2FA to zero trust. Bookmark it, and click through to the deep dives on each concept.
Read more →A magic link logs you in by emailing you a one-click link instead of asking for a password. Here is how it works, why services love it, and its real security trade-offs.
Read more →Even with cookies blocked and incognito on, websites can often recognise your device from its unique configuration. Here is how device fingerprinting works, for tracking and for security.
Read more →Entropy is the real math behind password strength, measured in bits. Here is what it means, how to think about it, and why it explains why long beats complex.
Read more →A salt is a pinch of randomness added to each password before hashing, and it defeats an entire class of attacks. Here is what it does and why every stored password should have one.
Read more →
