What we know
Proposal for false passwords per account and a separate honeychecker that detects their use.
Evidence limits
The linked source supports a description of this resource, but this record does not yet document comparable outcomes or a specific critical review.
Reviewed: full text.
Full-text review · 2026-09-16
Design and scope
Design of per-account honeywords and a separate honeychecker; analyzes generation, attacks and operation.
Main finding
Turns use of a false credential into a signal that the password file was compromised.
Evidence limits
Effectiveness depends on indistinguishable honeywords, honeychecker protection and safe false-alarm handling.
Sources and provenance
- Honeywords: Making Password-Cracking Detectable
full-text · 2026-09-16
Reviewed: 2026-09-16. This record may change when new evidence is found.