The password tag has no wiki summary.
6
votes
3answers
331 views
Using two salts for user authentication?
When storing user credentials in a database, we all know that hashing the password is the bare minimum you should do, but salting it before hashing is better. The salt should be randomly generated, ...
6
votes
4answers
180 views
Webhosting company able to unhash passwords?
Tonight I was using the cPanel of a web-site I host and when I went to change the password I received a warning that I couldn't change the password to my desired password because it was too similar to ...
4
votes
1answer
231 views
Is there a simple way to protect my webpage by password?
I am writing some simple HTML pages. I need to protect some pages and some files (to be downloaded) by requiring username and password. Do anyone has a simple solution? Thank you very much!
3
votes
4answers
171 views
How can I safely analyze users' password quality?
Given a registration service website with rather lax password requirements for the users (6-12 characters with no special requirements), how can I safely analyze what quality of passwords users pick ...
3
votes
2answers
100 views
How to maintain unique user per paid account in a website with given set of Email ID and password?
For a website, there is a free and a paid membership option. Once the user pays some amount he gets a membership for a month for additional products that are not in the free account on the website.
...
3
votes
2answers
111 views
What are recommended password reset mecanisms?
All,
I'm developing a small, non-commercial web app. I'm trying to decide how to help a user who might have lost their password. I need a mechanism that is, in order of priority:
1) User friendly;
...
3
votes
2answers
107 views
Use Outlook password for website verification
I am currently building an internal employee dashboard for our global company (it is hosted on an external website for logistical reasons)
I'd like (need) to password protect the page as we will be ...
3
votes
3answers
156 views
Why do websites require retyping the password upon user error in a registration form?
Many times, when you fill out a registration form and miss a required field, the form reloads with all the fields filled out except for the password which you have to retype.
I'm wondering if I ...
2
votes
1answer
42 views
Where to place the link to the password changing form?
Sorry for this pretty general question... but, where do you place the link for password changing in your websites?, where do you think is the best place? in the login form, in the personal data ...
2
votes
1answer
62 views
Password protected website
I need to add a user authentication page before the actual homepage of the website.
In Joomla! I just set the website offline and the offline page loads in place of the homepage but then it's ...
2
votes
2answers
921 views
Can the password recovery function of Drupal be configured to only ask for email address?
(I originally asked this question in webapps.stackexchange.com.)
By default, in Drupal, when we provide a "set new password" form, the form asks for either a site username or an email address. If the ...
2
votes
1answer
27 views
htaccess setting resets upon uploading new updates
Hi I am trying to set up password protected web pages with htaccess on dreamhost.com. While the panel in dreamhost allows one to set up password protection rather quickly. Once I uploaded updates to ...
2
votes
1answer
942 views
When I am root, “mysql” connects without a password, even though I've set one [closed]
When I am root, "mysql" connects without a password, even though I've set one:
# mysqladmin -u root password 'whatever'
# mysql -u root -p
Enter password: (typing the 'whatever' above)
Welcome to the ...
1
vote
2answers
55 views
Chrome recent change to password field handling breaks my page
Our site has a profile update page which allows the user to change their password and other basic information. This page has been in production since 2006. Recent changes to Chrome have broken the way ...
1
vote
2answers
55 views
Is there a way to retrieve a FTP/cPanel accounts password using WHM?
I know you can reset an accounts password with WHM, but does any one know a way to retrieve an existing one?
1
vote
3answers
95 views
1
vote
2answers
2k views
Website hacked, cpanel password not encrypted?
Yesterday I found out that all the websites that are hosted on my webhosting site were hacked. I tried to change my password, and unbelievably, I COULD SEE my password there. This means my password is ...
1
vote
1answer
71 views
Contact YouTube
Is there any direct way do contact a „real” person, an YouTube employer?
Someone created an account for the company I work for (previous employer). She entered some password and e-mail. The provided ...
1
vote
1answer
112 views
Is viewing a site's unpassword protected HTTP logs/stats illegal?
If not, why? If so, please provide US Federal code, or case law confirming this is the case.
1
vote
2answers
168 views
Proper password handling for login
I have read a lot about PHP login security recently, but many questions on Stack Overflow regarding security are outdated.
I understand bcrypt is one of the best ways of hashing passwords today. ...
1
vote
1answer
48 views
Asking for user's 3rd party username/password like Facebook's Find Friends feature
Preface
Facebook and other sites have features where they ask users for their credentials for 3rd party web sites (see image below). Presumably, facebook then uses the credentials to login as the ...
1
vote
5answers
84 views
How do webmasters store and keep track of their passwords [closed]
I'm developing a site for the first time, and I'm trying to work out the best way to store and track all the accounts/passwords e.g. Server passwords, ftp passwords, API passwords (FB, Google, ...
1
vote
1answer
257 views
Is the php method md5() secure? Can it be used for passwords? [closed]
So executing a php script causes the form values to be sent to the server, and then they are processed.
If you want to store a password in your db than you want it to be a cryptographic hash(so ...
0
votes
1answer
146 views
Controlling Access using htpasswd and htaccess
I've got a bit of a peculiar problem on my site. I'm using a .htaccess and .htpasswd file to protect the root of the site. This works great, but when I try to view a video file on my site, it prompts ...
0
votes
0answers
68 views
Managing client passwords [closed]
I am just starting up a small website development business and one of the issues I am having is remembering passwords and account information for clients hosting, cpanel, ftp accounts etc.
I was ...
0
votes
0answers
107 views
SIMPLEST way to set up password protection for a static site, with basic admin UI?
I have a static site.
I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...
0
votes
0answers
89 views
a hashed password doesn't match the same hashed password? [closed]
maybe I have the concept of hashing wrong, but when I hash my passwords and salt them I get one string, and when I go to log in the newly signed up user I apply the same method on the password they ...
0
votes
0answers
19 views
File Management CMS? [duplicate]
Possible Duplicate:
Which Content Management System (CMS) should I use?
I'm looking for some kind of a CMS -- or similar software -- for hosting non-web files (PDFs, Docs, xls, other ...
0
votes
0answers
83 views
Is there a way to password protect directory only in cpanel. But the user should not be prompted the password, when they try to access it via web?
I have a simple question that was troubling me since a long time. I have multiple developers working on my cpanel account simultaneously. I want to assign them individual directories to work on and ...
