Don’t limit your passwords

There is nothing more frustrating than seeing so many sites that put a ridiculously low upper limit on password length. Modern websites should be using modern password hashing, and every modern hash function handles long passwords just fine.

Why are you still storing passwords in your users table?

Make it hard to do the wrong thing.

Most non-trivial web applications which have a concept of a “user” have a database table devoted to users, typically holding all sorts of…

How can Heartbleed exploit affect me? 

List of Proof of Concepts included below.