The Open Web Application Security Project (OWASP) is an online community that produces freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security.
https://github.com/OWASP/ASVS#latest-released-version
https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html
"Humans are the weakest link in the information security chain”
By Alvaro Uribe