The Cit0Day Breach Collection

Humans Are Bad at URLs and Fonts Don’t Matter

Hacking Grindr Accounts with Copy and Paste

Padlocks, Phishing and Privacy; the Value Proposition of a VPN

We didn't encrypt your password, we hashed it

I'm Open Sourcing the Have I Been Pwned Code Base

Building the ultimate home office again

Pwned Passwords, Version 6

Analysing the (Alleged) Minneapolis Police Department “Hack”

The Unattributable “Db8151dd” Data Breach

No, I Won't Link to Your Spammy Article

Let's Stop the 5G Hysteria: Understanding Hoaxes and Disinformation Campaigns

Project Svalbard, Have I Been Pwned and Its Ongoing Independence

Troy Hunt: Offshoring roulette: lessons from outsourcing (2016)

I've Just Launched “Pwned Passwords” V2

Why Your Static Website Needs HTTPS

The Difficulty of Disclosure, Surebet247 and the Streisand Effect

Promiscuous Cookies and Their Impending Death via the SameSite Policy

Still Why No HTTPS?

HSTS from Top to Bottom

Banks, Arbitrary Password Restrictions and Why They Don't Matter

Extended Validation Certificates Are ( Really) Dead

Authentication and the Have I Been Pwned API

Project Svalbard: The Future of Have I Been Pwned

PayPal's Beautiful Demonstration of Extended Validation Fud

How to Track Your Kids (and Other People's Kids) with the TicTocTrack Watch

Cookie Warning Shenanigans Have Got to Stop

Everything you ever wanted to know about building a secure password reset

773M Record “Collection #1” Data Breach

10 Personal Finance Lessons for Technology Professionals by Troy Hunt

More →