Journal
A running journal for password and identity defense. These notes are opinionated, tactical, and focused on what actually changes compromise probability for real users and teams.
Field Note 01
Passkeys are growing fast, but most users still live in a mixed environment. The manager remains the bridge technology that keeps unique secrets viable everywhere.
Read articleField Note 02
The strongest password in the world does not help if a stale phone number, a weak helpdesk script, or an old backup email can bypass it.
Read articleField Note 03
Treat passkey rollout as an identity graph problem. Start with email, admin consoles, finance, and source control because they affect everything else.
Read articleEditorial Direction
The journal is where longer-form thinking lives: rollout strategy, human behavior, team workflows, and the controls that still fail even after people pick stronger passwords.
Best Companion
Articles tell you what to change. The forge and audit pages let you act on it immediately by replacing weak credentials and inspecting old patterns.