Blog

Blog

Page 4 of 11 — guides, tutorials and tips from our free, privacy-first online tools.

Passphrase vs Random Password: Which Is Harder to Crack?
security-tools

Passphrase vs Random Password: Which Is Harder to Crack?

Passphrase vs random password — which is stronger? Compare entropy, diceware word lists, and cracking cost with hard numbers from NIST SP 800-63B and RFC 2289.

Read more →
TOTP vs SMS vs Passkeys: A Threat-Model Comparison
security-tools

TOTP vs SMS vs Passkeys: A Threat-Model Comparison

Compare SMS codes, TOTP authenticator apps, and passkeys by threat model: SIM swapping, phishing resistance, origin-binding, and when to use each factor.

Read more →
URL-Safe Base64 vs Standard Base64: Key Differences
dev-tools

URL-Safe Base64 vs Standard Base64: Key Differences

Standard Base64 uses +, / and = that break URLs, JWTs and filenames. Learn the url safe base64 vs standard base64 difference and how to fix decode errors.

Read more →
When Services Use SHA-256 or 8-Digit TOTP
security-tools

When Services Use SHA-256 or 8-Digit TOTP

RFC 6238 defaults to SHA-1, 6 digits, 30 seconds. Learn what happens when a service picks SHA-256 or 8-digit codes and why some apps generate wrong codes.

Read more →
Catastrophic Backtracking: Spot and Fix ReDoS-Prone Regex
dev-tools

Catastrophic Backtracking: Spot and Fix ReDoS-Prone Regex

Learn why nested quantifiers cause catastrophic backtracking, how ReDoS attacks freeze servers, and concrete techniques to detect and rewrite vulnerable regex.

Read more →
Regex Lookahead and Lookbehind: Practical Examples
dev-tools

Regex Lookahead and Lookbehind: Practical Examples

Master regex lookahead and lookbehind with clear, testable examples — password rules, thousands separators, masking, and the gotchas that trip people up.

Read more →