October 25, 2016 by P.I.E. Staff

Greatly improve the security of your software by making it automatically apply the latest security updates.

September 20, 2016 by P.I.E. Staff

How to implement a secure and robust "I forgot my password" system.

June 22, 2016 by P.I.E. Staff

The case for character encoding that is safe to use to encode cryptographic secrets.

April 18, 2016 by P.I.E. Staff

Deserializing a string into a data structure is a simple task riddled with security holes.

March 6, 2016 by P.I.E. Staff

The answer to a very frequently asked question that most people in the industry know without needing to read this.

February 15, 2016 by P.I.E. Staff

Salted Password Hashing with Argon2, Scrypt, Bcrypt, and PBKDF2

November 7, 2015 by Scott Arciszewski

Preventing side-channel attacks (i.e. timing attacks on MAC validation) and dangerous compiler optimizations with a blinded comparison.

October 27, 2015 by P.I.E. Staff

The theory and practice of securing file upload form handlers. Our examples are in PHP, but many of the filesystem security concepts here are language agnostic.

September 21, 2015 by P.I.E. Staff

Don't just fix security vulnerabilities, prevent the habits that cause them in the first place.

September 11, 2015 by P.I.E. Staff

If you ever wondered the best way to encrypt a username or row ID for an obfuscated URL in PHP, this is the article for you.