Editorial & Security Standards

SecurePassLab is a small independent project. These standards explain how we try to keep technical guidance accurate, transparent, and useful.

Who is responsible for the content

Site content and tools are created and maintained independently by an IT professional with hands-on experience in support and systems administration. SecurePassLab does not invent credentials or present itself as a certification authority.

Primary sources first

When a guide makes a recommendation about authentication, password policy, or MFA, we prefer primary sources such as NIST and CISA over anonymous blog posts or copied summaries. Reference links are included on relevant guides so readers can check the source material themselves.

Separate math from real-world security

Entropy and search-space calculations can be precise under stated assumptions. Real-world compromise risk cannot. SecurePassLab labels crack-time examples as illustrations and avoids presenting a calculated time as a guarantee that an account will remain safe for that long.

AI-assisted, human-reviewed

AI tools are used to assist with drafting, coding, editing, and testing. Published guidance is reviewed by the site maintainer, and technical claims are checked against primary references where practical. AI output is not treated as a source of authority by itself.

No paid rankings or security endorsements

SecurePassLab does not currently publish sponsored password-manager rankings, paid security certifications, or claims that a product is “unhackable.” If commercial relationships are introduced later, they should be clearly disclosed.

Updates and corrections

Security guidance changes over time. Guides include a review date and may be updated when standards or recommended practices change. Material corrections should change the page content rather than silently changing only the date.

Scope

The site is educational. It does not replace an organization's security policy, a professional security assessment, or the requirements of the service where a password is used.

Learn how the generator works, review our privacy policy, or browse the security guides.