Utah Supreme Court says suspects can refuse to hand over phone passwords to the police
Other state Supreme Courts disagree and the case would wind up before the US Supreme Court
This AI can pick up passwords from the sound of your keystrokes
Your keyboard clatter could be giving away secrets
Your favorite password manager could be exposing your credentials
AutoSpill is a security nightmare that affects even up-to-date Android devices
The worst passwords of 2023 are also the most common, "123456" comes in first
Last year's most common password: "password" falls to 7th place
1Password now supports passkeys on desktop browsers and iOS
1Password will now allow users to register and sign in with passkeys in your desktop browser and on iOS 17. Use passkeys to sign in to compatible websites, including Amazon, Google, Microsoft and more.
Windows 11 preview adds biometric logins for apps and websites
Windows 11 enables FIDO passkeys for passwordless authentication
Netflix will start charging US customers for sharing account passwords
The crackdown has arrived
A hot potato: The time that many of us have been dreading is here: the days of being able to share your Netflix password with friends and family freely are over. The streaming giant is informing customers in the US that they will either have to stop others from using their account or pay $7.99 per month for an additional membership for someone outside the main household.
Google adds support for passkeys to protect your account
A better way to secure your Google account
Proton Mail's new product is a secure password manager
Let's hope the service doesn't turn into another LastPass-style security disaster
Bitwarden's password manager browser extension has a known exploit it hasn't addressed in five years (Update: fix coming)
PSA: Hackers can steal your username and password for a website using an embedded iframe. It's a weakness for all password managers, and most have addressed the flaw in various ways, including issuing warnings when users are on a login page with an iframe or not trusting subdomains. Bitwarden is the sole exception, having determined in 2018 that the threat was not significant enough to address.
LastPass says employee's home computer was hacked to steal a decrypted vault
Reportedly via Plex
In brief: Password manager LastPass has revealed details of a breach last year that resulted in partially encrypted user login data being stolen. The company confirmed that the incident stemmed from a previous hack in August that enabled the hacker to steal credentials from a DevOps engineer's home computer and obtain a decrypted vault.
Two-Factor Authentication: Methods and Myths
When I mentioned to a few friends that I was writing a feature about two-step authentication, the typical response was an eye-roll and "Oh, that annoying thing?..." But wait. There's more to it.
How to Find Your Wi-Fi Passwords in Windows
Need to give someone your Wi-Fi password but can't find the key on the router? Use your Windows PC and our handy guide to uncover the hidden treasure.
You should change your password manager's clipboard settings now
Leaving passwords in the clipboard indefinitely could be dangerous
NortonLifeLock warns of password manager breach after failing to reject mass login attempts
Credential stuffing attack could impact thousands of accounts
The US Department of the Interior has a significant password issue
No "123456" passwords here but opsec is still very, very bad
The UK says sharing Netflix passwords is illegal, could be criminal fraud
But you probably shouldn't worry
Password-based hacks have increased 74% over the last year
There are almost 1,000 password-based attacks every second
Security researchers show off the RTX 4090's password cracking power
The new GPU significantly reduces the time required to obtain or recover user passwords
Microsoft extends brute-force attack protections to local Windows accounts
All Windows versions will be better protected against recurring login attempts
Google brings passwordless logins to Android and Chrome
Android and Chrome step up their support for the FIDO Alliance
Plex warns all users to change their passwords following a data breach
Emails, usernames and encrypted passwords were all compromised
Google significantly improves its password manager for Chrome on PC, Android, and iOS
New password generator and strength checker, uniform interface
Apple 'passkeys' support in macOS Ventura and iOS 16 promise a passwordless future
It's a feature on Apple devices, but works cross-platform
CEOs and other top executives use the same terrible passwords as other people
Shouldn't they know better?