The best Authentication newsletters

A managed services provider shares practical, first-person guidance on password managers, storing TOTP codes, passkeys and autofill, plus reflections on IT operations such as backup alert handling. The writing draws on hands-on experience and points readers to specific sources and tools.

A Microsoft-focused blog by an identity and security practitioner that explains Entra ID, authentication, and security UX concepts for admins and architects. Recent issues cover AI agent identity with Entra Agent ID and Microsoft Foundry, a comparative framework for passkeys, PRTs and device tokens, and how Microsoft's warning and prompt design is improving.

A product blog from PropelAuth covering B2B authentication features and practical guidance for developers, including MCP server authorization and multi-IdP enterprise SSO. Posts combine feature announcements with explanations of when to use each setting and comparisons of auth providers.

A personal blog by Florian Jensen with hands-on technical guides covering smart home integration, self-hosting Ghost with ActivityPub behind Traefik, and multi-host single sign-on with Authelia. Readers get step-by-step configuration instructions with working snippets, plus occasional travel writing.

Oliver Sild, founder and CEO of Patchstack, writes about founder personal growth, leadership pivots, and practical WordPress security topics like passkeys and two-factor authentication. Readers get a mix of company-building reflections and hands-on security guidance for WordPress site owners.

Show notes for a podcast about usable security and privacy, with each episode pairing a guest such as a 1Password or USABLE.tools representative with the host, Conor Gil. Each entry lists the episode's discussion points along with links to the guides, tools and research it references.

Vouch is a product newsletter about verifying the identity of humans, AI agents and organizations behind devices through endorsements from real people. Issues explain its philosophy of recognizing people rather than credentials, and how in-person QR scans and quorum approvals work.