MFA
4 guides tagged “MFA”.
- The 12 Authentication Mistakes That Show Up in AI-Generated Apps Reversible password storage, unverified tokens, sessions that never die, enumerating logins, bypassable MFA, and unprotected endpoints — twelve auth defects generated code ships with, and the fix for each.
- How to Choose an Authentication Method for Your App: A Decision Guide Sessions, JWTs, OAuth, passkeys, magic links, or SSO — the six questions that decide your auth method, a comparison table, and the cases where each option is the wrong pick.
- What Are the Different Types of Authentication (and What Is Each One For)? Passwords, one-time codes, passkeys, magic links, social sign-in, SSO, certificates, and API keys — how each authentication type works, what it's for, and where it's weak.
- What Is Phishing-Resistant MFA? Phishing-resistant MFA uses FIDO2 passkeys or hardware keys that can't be tricked by fake sites — unlike SMS codes. Learn why it's the new baseline.