Blog
No fluff and no fear marketing. Standards, mechanics, and practical decisions, written by the people who build the thing.
The stack-specific companion to our TOTP implementation guide: real integration paths in C#/.NET, Spring, Laravel, and Django, plus the hardening every framework leaves to you.
Read the post
How to configure TOTP in Keycloak, AWS Cognito, Okta, and Salesforce: the policy knobs that matter, the enrollment gotchas, and what a stolen seed database means.
Read the post
Where VPN MFA actually lives: OpenVPN's built-in TOTP and the PAM pattern, AnyConnect's RADIUS and SAML paths, FortiToken, OpenConnect, WireGuard, and the drift to zero trust.
Read the post
FIDO2 explained without the vendor gloss: what WebAuthn and CTAP2 each do, what a passkey actually signs, why syncing changes the trade, and what it leaves broken.
Read the post
Password managers for teams and business in 2026: shared vaults, RBAC, SCIM, the SSO tax, and the shared-TOTP problem, compared from Bitwarden and 1Password to Vaultwarden.
Read the post
The best password managers in 2026, judged on encryption, audits, export and 2FA storage: Bitwarden, 1Password, Proton Pass, KeePass and the rest, honestly compared.
Read the post
Authy in 2026: what the desktop shutdown, the one-device limit, and the 33-million phone-number leak mean for your tokens, and how to leave safely.
Read the post
Where 2FA hides in Notion, Mailchimp, DocuSign, and Jira in 2026, what admins can enforce, and why account-level second factors beat per-project settings.
Read the post
Snapchat calls it Login Verification. Here is where the 2FA setting lives in 2026, why an authenticator app beats SMS, the one-device quirk, and the single recovery code.
Read the post
Microsoft 365 MFA in 2026: security defaults, per-user MFA, and Conditional Access explained, plus every Entra ID method ranked and a personal account walkthrough.
Read the postShowing 11–20 of 55 posts