Tech Password Sharing Prevention (Password Sentry, Strongbox, etc) - GoFuckYourself.com

jasonkmm · 07-13-2015, 06:55 PM

Hey All,

Anyone have any experience using Password Sharing, Brute force prevention software like these:

password-sentry.com
bettercgi.com/strongbox

What do you recommend for this? What do you guys use to prevent password abuse on your sites?

PSDan · 07-25-2015, 08:58 PM

I might be biased, but I'd recommend Password Sentry ;) If you have any questions, feel free to ask them.

Milfer · 07-25-2015, 10:12 PM

Quote:

Originally Posted by PSDan

I might be biased, but I'd recommend Password Sentry ;) If you have any questions, feel free to ask them.

Look like your replied to your own thread

nice way of spamming

PSDan · 07-25-2015, 10:35 PM

Nope. I discovered that thread while Googling "password sentry". Found on page 33 of 36. Something I routinely do looking for things like that. I'm sure a moderator can check and compare my IP with the original poster's IP. As a matter of fact, I would like to request a mod to do that, and report back.

PSDan · 07-25-2015, 10:39 PM

This was Google search result link:

https://www.google.ca/url?sa=t&rct=j...98717601,d.cGU

which I discovered here:

https://www.google.ca/?gws_rd=ssl#q=...ntry&start=320

jscott · 07-27-2015, 06:10 PM

Lots of opinions in my recent thread about it here Strongbox error message - GoFuckYourself.com - Adult Webmaster Forum

PhantomFrog · 08-06-2015, 04:52 PM

Before you decide, take a look at PhantomFrog.com

mrmarlowe · 09-28-2018, 03:38 AM

Phantom Frog in my opinion is the best password protection you can have for a pay site. I've tried most over the last 15 years but have been very happy for the last 7 years with Phantom Frog.

floresmedia · 10-08-2018, 09:46 PM

For bruteforce you can do a few things. First you should never save raw password to your database but rather save encrypted password using bcrypt or similar.

Then you can limit login tries. Either on the server side using fail2ban and blacklist ips after failed login attempts. Or by locking an account until the user is able to validate using another method of your choice.

07-13-2015, 06:55 PM	#1
jasonkmm Registered User Industry Role: Join Date: Jun 2015 Posts: 1	Password Sharing Prevention (Password Sentry, Strongbox, etc) Hey All, Anyone have any experience using Password Sharing, Brute force prevention software like these: password-sentry.com bettercgi.com/strongbox What do you recommend for this? What do you guys use to prevent password abuse on your sites?

07-25-2015, 08:58 PM	#2
PSDan Web Developer Industry Role: Join Date: Aug 2011 Location: Vancouver, BC, Canada Posts: 189	I might be biased, but I'd recommend Password Sentry ;) If you have any questions, feel free to ask them. __________________ Dan Password Sentry The better app for better websites for better website password protection! Follow Us on Twitter Like Us on Facebook Follow Us on LinkedIn Subscribe to Our YouTube Channel

07-25-2015, 10:35 PM	#4
PSDan Web Developer Industry Role: Join Date: Aug 2011 Location: Vancouver, BC, Canada Posts: 189	Nope. I discovered that thread while Googling "password sentry". Found on page 33 of 36. Something I routinely do looking for things like that. I'm sure a moderator can check and compare my IP with the original poster's IP. As a matter of fact, I would like to request a mod to do that, and report back. __________________ Dan Password Sentry The better app for better websites for better website password protection! Follow Us on Twitter Like Us on Facebook Follow Us on LinkedIn Subscribe to Our YouTube Channel

07-25-2015, 10:39 PM	#5
PSDan Web Developer Industry Role: Join Date: Aug 2011 Location: Vancouver, BC, Canada Posts: 189	This was Google search result link: https://www.google.ca/url?sa=t&rct=j...98717601,d.cGU which I discovered here: https://www.google.ca/?gws_rd=ssl#q=...ntry&start=320 __________________ Dan Password Sentry The better app for better websites for better website password protection! Follow Us on Twitter Like Us on Facebook Follow Us on LinkedIn Subscribe to Our YouTube Channel

08-06-2015, 04:52 PM	#7
PhantomFrog Registered User Join Date: Jul 2006 Posts: 89	Phantom Frog Before you decide, take a look at PhantomFrog.com __________________ PhantomFrog.com....Premium Password Protection PhantomCart.com....CCBill + Phantom Cart = Clips Store Solution PhantomFlicks.com .Token-based Clips Store

07-27-2015, 06:10 PM	#6
jscott So Fucking Banned Industry Role: Join Date: Feb 2001 Location: Taipei Posts: 25,198	Lots of opinions in my recent thread about it here Strongbox error message - GoFuckYourself.com - Adult Webmaster Forum

09-28-2018, 03:38 AM	#8
mrmarlowe Confirmed User Industry Role: Join Date: Jan 2009 Posts: 268	Phantom Frog in my opinion is the best password protection you can have for a pay site. I've tried most over the last 15 years but have been very happy for the last 7 years with Phantom Frog. __________________ I love CCBILL!

10-08-2018, 09:46 PM	#9
floresmedia Confirmed User Industry Role: Join Date: May 2017 Location: California Posts: 133	For bruteforce you can do a few things. First you should never save raw password to your database but rather save encrypted password using bcrypt or similar. Then you can limit login tries. Either on the server side using fail2ban and blacklist ips after failed login attempts. Or by locking an account until the user is able to validate using another method of your choice. __________________ Ditch traditional hosting an go cloud. I can help. Contact: [email protected]