Blog

Articles about passwords, security, and why almost everything we were taught was wrong.

The password.es API is live: how to use it

This site has spent months saying your password should never leave your browser, and it now ships an API that generates them on a server. The contradiction is real and we are not hiding it: here is how to use it, what it returns, what it does not do yet, and when you should not call it.

What was wrong with password.es, and no longer is

A site that spends its days saying how things ought to be done owes you an account of when it wasn’t doing them. The checker froze the tab while you typed, the search description was cut off mid-sentence in fifteen languages, and the draw had a tiny bias. Here is what we fixed, with the numbers.

Where your saved passwords are, and who else can open them

If you have ever clicked «Save password» —and you have— you already use a password manager, even though nobody told you. The question that matters is not where they are stored, but what it takes to open them. And there the three most used browsers work in ways that have nothing in common.

What a password is, and why we've had it wrong for sixty years

The computer password was born at MIT in 1961. The first breach came a year later, and it wasn't a criminal: it was a student who wanted more machine time. This is the story of why the rules we all learned were bad — and where they came from.

Why password.es never sends your password anywhere

Any website can type "we don't store your password" onto a page. It's free, it commits you to nothing, and nobody can check it. The only honest way out is to not need the data: everything happens in your browser, and here's how to open the inspector and confirm it without trusting a word we say.

Your password manager vs your memory: the one rule that survived

Of everything we were told about passwords, exactly one rule has survived: a different one on every site. And it's the one nobody keeps, because your memory doesn't stretch that far. A password manager isn't a convenience: it's what turns that rule into something you can actually do.