Blog
No fluff and no fear marketing. Standards, mechanics, and practical decisions, written by the people who build the thing.
Can your second factor live in the browser you log in from? A clear-eyed comparison of TOTP browser extensions, web-app authenticators, and desktop apps in 2026.
Read the post
Turning on 2FA across a homelab: Proxmox VE, Home Assistant, Nextcloud, Synology DSM, and your VPN, plus recovery plans that survive an admin lockout.
Read the post
A developer's guide to implementing TOTP: secret generation, the HMAC pipeline, otpauth enrollment, constant-time checks, rate limiting, and the libraries to use.
Read the post
How SEBI's mandatory two-factor rule changed Indian broker logins, and what Zerodha Kite, Groww, Fyers and Upstox now offer for TOTP and app-based 2FA in 2026.
Read the post
What Fidelity, Schwab, Chase, Capital One, Amex and PayPal actually offer for two-factor authentication in 2026, and which settings are worth switching on.
Read the post
Passpack in 2026: the veteran web vault that went business-first — v7, the packing key model, zero-knowledge sharing, plans, and who should still use it.
Read the post
KeePass is a file format with a family of apps: KeePass 2.x, KeePassXC 2.8, KeePassDx, KeePassium, Strongbox — who each is for, and how TOTP fits.
Read the post
Dashlane in 2026: the free tier is gone, Premium and Friends & Family pricing, passwordless vault login, YubiKey support, and the bundled VPN honestly reviewed.
Read the post
1Password in 2026: how the 128-bit secret key protects your vault, what version 8 still means, current pricing, Watchtower, YubiKey sign-in and passkeys explained.
Read the post
NordPass in 2026: XChaCha20 encryption, audits, free and paid plans, the built-in authenticator, and where it beats Bitwarden or falls short.
Read the postShowing 21–30 of 55 posts