Password

I stumbled on the “Tozny API”…

Dan Knauss

March 3, 2017

I stumbled on the "Tozny API" recently which instead of passwords presents a functionality similar to "email me an access code" from Slack. The purpose of which is to help either verify email addresses or promote password-free authentication for your…

HTTPS everywhere is getting close to reality

Brian Krogsgard

September 9, 2016

Google has been pushing HTTPS harder than anyone. They haven't been alone -- not by a long shot -- but they are making the most aggressive moves to push the web to full encryption. Their latest move is the biggest,…

I recently stumbled upon a plugin…

March 21, 2016

I recently stumbled upon a plugin from 10up called "WP-Hammer" that cleans and removes information from a WordPress site that might be sensitive -- like emails and passwords or undesired users and posts. This might be a quick and dirty tool…

WP Engine breach was very likely via Linode

Brian Krogsgard

January 6, 2016

You could say that Linode has been a bit of a pain in WP Engine's ass lately. Linode is one of their service providers (they were their only/primary one for a long time, I believe), which basically means WP Engine…

WP Engine requiring mass password reset on all accounts

Brian Krogsgard

December 10, 2015

Security

WP Engine sent emails to all existing (and apparently many former) customers stating that they needed to reset every password associated with their account: While we have no evidence that the information was used inappropriately, as a precaution, we…

WordPress 4.3, “Billie”, released

Brian Krogsgard

August 18, 2015

DesignMake WordPress

WordPress 4.3, "Billie", has been released. Billie includes four major user-facing features that most website owners will experience on a semi-regular basis, and many other enhancements, bug fixes, and developer features.

Strong passwords by default

Brian Krogsgard

July 29, 2015

Mark Jaquith has further outlined the new password features in 4.3, and they are exciting. I think this may prove to be the most important new feature for this release. I've already covered this, but I'm covering it again. I…

Automatically expire passwords for WordPress users

Brian Krogsgard

April 29, 2015

Security

Frankie Jarrett has created yet another handy plugin, this time to auto expire passwords for users of certain roles based on a customizable number of days. This plugin could be handy for organizations that require password resets, or just for…

The anatomy of a security breach, and how to do good in a bad situation

Brian Krogsgard

September 25, 2014

BusinessPlanet

On Tuesday, iThemes posted an announcement that they had suffered from a security breach of their website and servers. The attackers had reached the servers which stored customer information, including email addresses, IP addresses, full names, and yes, passwords. iThemes…

What’s new in WordPress 3.7, “Basie”

Brian Krogsgard

October 24, 2013

Make WordPressWordPress News

WordPress 3.7, "Basie", has just been released. It's been named in honor of Count Basie. The WordPress 3.7 development cycle is the quickest turnaround between major versions of WordPress ever. You may not notice a whole lot of sexy new…

Allow Users to Update their Profile from the Front End with Gravity Forms

Brian Krogsgard

February 4, 2013

WordPress News

Using Gravity Forms, you can allow users to edit their profile from a simple form on the front-end of your site, ensuring consistency with the styling of your site. It even supports passwords and custom profile fields.