Itqualityassurance
Passwords
How do we tell a user that when they logged in we noticed their password was insecure?
What is a insecure password?What is password management practices explain in detail?What level of protection does the mechanism offer for passwords?W...
What percentage of internet users save credentials in the browser?
depend on memory alone to manage passwords. 32% of users save passwords in a browser, 26% in spreadsheets. What percentage of people reuse passwords?D...
Do we really need to remember all the passwords?
Should I remember all my passwords?Is it normal to forget passwords?How many passwords does the average person have to remember? Should I remember a...
Should editing a password be 2 step process or all in one form?
Which password practice creates the most risk for compromising an account?Should you give out your password? Which password practice creates the mos...
Why do some websites (including Google) trim whitespaces in passwords?
Passwords are often white listed to prevent illegal or unrecognized characters, and the regex matching sometimes trims the whitespace by mistake. etc....
Should passwords expire?
For decades cybersecurity professionals held tight to the idea that passwords needed to be changed on a regular basis. In recent years, however, organ...
Are there any good guidelines to how many passwords a user can safely remember?
How many passwords can a person remember? How many passwords can a person remember?How many passwords does the average person have to remember? Acco...
Forcing Users To think up More Complex Passwords / Ease of Remembering Them
Why do passwords need to be complex?Which is an example of a complex password?Does password complexity matter? Why do passwords need to be complex?H...
Is it good idea to send user password upon register?
There's no reason to send the user a copy of their password when they register for your service. No reputable website does that. Is it ever okay to sh...