Articles about Identity and access
Everything we have written about Identity and access.
- All topics
- WordPress
- Web security
- Incident response
- Ransomware
- Secure development
- Compliance
- Identity and access
- Phishing
- Penetration testing
- Email security
- Vulnerabilities
-
Passwords and passkeys - what NIST SP 800-63B-4 recommends
NIST's current password rules explained - 15-character minimums, no forced rotation, breached-password checks - plus MFA strength and where passkeys fit.
-
JWT security pitfalls and how to avoid them
Common JWT mistakes - alg none, RS256 and HS256 confusion, weak HMAC secrets, missing claim checks, kid injection, revocation and storage - and the fixes.
-
EUDI Wallet logins: what to check before you accept them
Questions for municipalities and service providers on assertions, attributes and signing flows before they accept EUDI Wallet logins.