Independent practical guidance for handling credentials, authentication, API access, secrets, incidents, and everyday IT security.
Credential security is broader than sending a password safely. Good security also depends on identity verification, least privilege, strong authentication, controlled storage, limited retention, rotation, and incident response.
3 published guides in this topic.
Password managers and one-time links solve different problems. Learn when you need long-term controlled storage and when temporary delivery is the better fit.
Read articleEmail is convenient, but its long retention, forwarding, notifications, and account access make it a poor place for reusable passwords.
Read articlePractical methods for sending passwords and credentials while reducing the risk created by long-lived email and chat history.
Read article