Learn
Can somebody steal a passkey?
New research says malware can reach Google's synced passkeys on Windows. Here is what has to go wrong first, and why a clean computer is the whole defense.
Passwords
Password managers, passkeys, and multi-factor login, explained without the lecture.
Learn
Start using a password manager
One password used everywhere is one key to every lock. A password manager fixes that, and starting is easier than you think.
Learn
Leaked Email
Your email address is in a data breach, probably several. What that actually means for you, how to check which leaks you are in, and the short list of steps that genuinely help.
Learn
Why MFA annoyance is worth it
Those two-factor codes show up because somebody already has your password. Which kind of MFA to use, which kind to avoid, and why a strong password is not the answer by itself.
News
Patching is the new password
Verizon's 2026 breach report found unpatched software passed stolen passwords as the top way attackers get in. Why installing updates now matters as much as your login does.
News
CISA contractor posted admin keys to public GitHub
A federal contractor left AWS GovCloud admin credentials and a file of plaintext passwords in a public repository for six months. How it happened, and the habit that prevents it.
Learn
What the heck is a Passkey?
A passkey signs you into a site with your face, fingerprint, or PIN instead of a password. How it works, why a scammer cannot phish one, and what happens if you lose your phone.