FejoaAuth allows secure password reuse at multiple FejoaAuth providers. FejoaAuth prevent providers to learn any information about the user password and thus a malicious provider can’t impersonate the user at another provider or decrypt data that is protected with the user password.
FejoaAuth uses key strengthening to protect the user password from dictionary attacks. The user is in control of choosing appropriate key strengthening parameters to make it arbitrary hard for an attacker to brute force the user password.
