Authentication

6 guides tagged “Authentication”.

  1. JWT Security: Common Mistakes That Get Tokens Stolen JWTs are easy to generate and easy to get wrong. Learn the mistakes — algorithm confusion, weak secrets, no expiry — that turn tokens into access. Information Security intermediate 5 min
  2. What Are Passkeys (and Should You Switch)? Passkeys replace passwords with cryptographic key pairs unlocked by your device, resisting phishing. Learn how they work and whether to switch. Information Security beginner 7 min
  3. How to Prevent Credential Stuffing Attacks Stop credential stuffing with multi-factor authentication, rate limiting, breached-password detection, and bot detection. Practical steps for any web app. Information Security intermediate 5 min
  4. What Is OAuth 2.0? OAuth 2.0 is a framework that lets apps access your data on another service without sharing your password. Learn the flows and core concepts. Information Security beginner 8 min
  5. What Is Phishing-Resistant MFA? Phishing-resistant MFA uses FIDO2 passkeys or hardware keys that can't be tricked by fake sites — unlike SMS codes. Learn why it's the new baseline. Information Security beginner 6 min
  6. What Is Credential Stuffing (and How Does It Get Your Accounts)? Credential stuffing reuses passwords leaked from one site to break into others. Learn how the attacks work and why unique passwords are the only real defense. Information Security beginner 5 min