the passgeni blog

Real users. Real opinions.

Password security news, compliance changes, breach analysis, and practical advice. No fluff.

SECURITYJul 19, 2025

Dictionary Attack vs Brute Force: What's the Difference?

Dictionary attacks use wordlists. Brute force tries every combination. Both are dangerous, but in different ways, against different password types.

6 min read→

COMPLIANCEJul 17, 2025

Enterprise Password Policy Template: Copy-Paste and Customise

A production-ready password policy template covering NIST 800-63B, PCI-DSS v4.0, and ISO 27001 requirements. Download and adapt for your organisation.

11 min read→

TOOLSJul 15, 2025

Open Source Password Managers: Bitwarden, KeePass, and Vaultwarden Reviewed

The case for open source password management. Bitwarden, KeePass, and Vaultwarden audited against the same criteria.

8 min read→

SECURITYJul 13, 2025

Password Security for Remote Work in 2025: The Threat Landscape Has Changed

Remote work expanded the attack surface. VPNs, home routers, personal devices — here is the updated threat model and what to do about it.

9 min read→

RESEARCHJul 11, 2025

10 Password Security Myths Still Circulating in 2025

Mandatory rotation. Complexity over length. Security questions. These myths persist despite the evidence. Here is what the research actually shows.

7 min read→

DEVELOPERJul 9, 2025

API Security Best Practices in 2025: Keys, Tokens, and Secrets

API keys in environment variables. Rotating secrets. Token expiry. Least privilege. The complete 2025 API security checklist for developers.

10 min read→

RESEARCHJul 7, 2025

Password Length vs Complexity: Which Actually Matters More?

The math is unambiguous: a 20-character lowercase-only password beats a 10-character mixed-case password. Here is why, and what it means for your policy.

6 min read→

SECURITYJul 5, 2025

What Actually Happens After a Data Breach: A Timeline

A data breach does not end when it is detected. Credential stuffing, account takeovers, and downstream fraud unfold over months. Here is the full timeline.

8 min read→

HOW-TOJul 3, 2025

Password Security for Marketing Teams: Shared Accounts and Agency Access

Marketing teams share social accounts. Agencies access client credentials. Neither should use shared passwords. Here is the right way to handle both.

7 min read→

Showing 1–9 of 53 posts

Newsletter

Get new posts in your inbox.

No spam. Security-relevant updates only. Unsubscribe any time.