Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Explore our questions

0 votes
0 answers
42 views

Should I redirect user to login screen after validating email and first password?

0 votes
1 answer
232 views

How can I have SSO with multiple login forms?

22 votes
4 answers
4k views

How long should 2 factor authentication codes be?

0 votes
0 answers
25 views

Will these actions better secure my web app

0 votes
2 answers
53 views

Is using TOTP from Authenticator app on a mobile device instead of passwords inherently 2FA?

1 vote
1 answer
46 views

Are JWT's needed when implementing passwordless magic link authentication?

0 votes
1 answer
90 views

Is Using an Authenticator App on the Same Device as the Passwordless Application a True 2FA?

0 votes
1 answer
32 views

Securing access to SAC from Windows EMS

1 vote
1 answer
94 views

What is the easiest way to implement a "passthrough" to let a device bypass the header requirement of an API which we both own?

1 vote
1 answer
139 views

Where to store tokens for analysis team members

5 votes
1 answer
2k views

How is a bad actor able to disable Amazon's 2-step verification without supplying a OTP?

1 vote
2 answers
234 views

Bloom filter to prevent replay attacks in signed HTTP requests

0 votes
1 answer
206 views

SSO authentication & authorization architecture/implemenation

0 votes
2 answers
231 views

Most secure way to pass data from client to server?

Browse more Questions