Scattered Secrets VS Keycloak

Scattered Secrets Reviews

Keycloak Reviews

Scattered Secrets mentions (3)

• A Decade of Have I Been Pwned

  I’m in the same boat — not a company, just an individual doing the separate-email-per-site thing. I contacted Scattered Secrets ( https://scatteredsecrets.com ) about a year ago with a similar question, being too big for an individual use case but too small for an organizational one. They didn’t have a perfect solution but were willing to work with me to figure something out. I’m sure Troy gets a lot of email, but... - Source: Hacker News / 5 months ago

• 11 password tools - See if your accounts have been breached, Learn about 2FA, Create virtual payment cards for one-time purchases..

  Https://scatteredsecrets.com/ - allows you to search data breaches to see if your password has been compromised. Source: almost 2 years ago

• A data breach or simple scare monger? (97 per thread)

  If you use the same email address across many websites, I can't recommend Scattered Secrets enough. You have to make an account for each email address you want to check, but it will spit back at you every leaked password you've used with that email in cleartext. Source: about 3 years ago

Keycloak mentions (4)

• Beyond the login page

  Most of the time nowadays, I prefer offloading this to an identity provider, using OpenID Connect or soon Federated Credential Management (FedCM), even if that means shipping an identity provider as part of the deliverables (I generally go with Keycloak, with keycloak-config-cli to provision its configuration). I'm obviously biased though as I work in IT services, developping software mainly for... - Source: dev.to / 5 months ago

• Okta Says Hackers Stole Data for All Customer Support Users

  Yet another breach of Okta... Why are companies not running something like keycloak [1] themselves? Are administrative/maintenance costs too high or is it plausible deniability? [1] https://keycloak.org. - Source: Hacker News / 5 months ago

• I built a ready-to-use auth server with TypeScript and Express.js

  I'd stick with a solution like https://keycloak.org in that instance. Source: about 1 year ago

• Authelia is an open-source authentication/authorization server with 2FA/SSO

  A few more projects in this space: - Keycloak (you won't get fired for picking this)[0] - CloudFoundry's UAA[1] - Gluu [2] - Keratin [3] - OpenUnison [4] - Dex[5] - Netlify's GoTrue[6] All of these solutions are a bit different but here are some of the axes: - Whether or not they function as an OAuth provider - Whether they're centered around application-user-login (email + password) or application auth (OAuth) or... - Source: Hacker News / about 3 years ago