<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Passwords on ilham.dev</title><link>https://ilham.dev/tags/passwords/</link><description>Recent content in Passwords on ilham.dev</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Sun, 27 Sep 2026 00:00:00 +0700</lastBuildDate><atom:link href="https://ilham.dev/tags/passwords/index.xml" rel="self" type="application/rss+xml"/><item><title>How I check password strength without fooling myself</title><link>https://ilham.dev/posts/how-to-check-password-strength-without-fooling-yourself/</link><pubDate>Sun, 27 Sep 2026 00:00:00 +0700</pubDate><guid>https://ilham.dev/posts/how-to-check-password-strength-without-fooling-yourself/</guid><description>Password strength is easy to misunderstand. A password can look complicated but still be weak if it is short or predictable.
The Password Strength tool estimates how hard a password may be to guess under stated assumptions.</description></item><item><title>How I generate random tokens with enough entropy</title><link>https://ilham.dev/posts/how-to-generate-random-tokens-with-enough-entropy/</link><pubDate>Sun, 27 Sep 2026 00:00:00 +0700</pubDate><guid>https://ilham.dev/posts/how-to-generate-random-tokens-with-enough-entropy/</guid><description>A good token should be random enough that guessing it is unrealistic.
The Token Generator tool helps with the mechanical part, but I still check the result before using it somewhere real.</description></item><item><title>How I think about bcrypt when storing passwords</title><link>https://ilham.dev/posts/how-to-hash-passwords-with-bcrypt/</link><pubDate>Sun, 27 Sep 2026 00:00:00 +0700</pubDate><guid>https://ilham.dev/posts/how-to-hash-passwords-with-bcrypt/</guid><description>Passwords should not be stored as plain text. If a database leaks, plain text passwords immediately become everyone else&amp;rsquo;s problem too.
For password storage, I want a password hashing function such as bcrypt.</description></item></channel></rss>