Articles & ideas
Security knowledge you can put to work.
This is the home of my long-form writing on authentication. I translate research into clear explanations, practical choices, and questions worth debating—without losing the technical detail that matters.
Start here
Featured article
New work will be published and maintained here as the primary source. Earlier articles may also link to their LinkedIn edition.
Understanding Authentication as a System
Authentication is more than checking a password, code, biometric, or passkey. A secure authentication system must be understood across enrollment, sign-in, user decisions, request context, credential changes, recovery, and the sessions it creates.
Read articleThe archive
Explore all articles
Follow the series from password fundamentals to multi-factor and phishing-resistant authentication.
