0

I am creating an admin panel for my website. I am coding the entire website by myself. What are some essential security features that I should implement so that only I can access the admin panel and no one else?

Improve this question
4
  • 2
    Your comment below mentions "what about a password?". If that's where you are in your design, then perhaps this is not the best site for you. The list of things you should consider, including passwords, is too long for any one answer to list. If you can refine your question to something specific, we might be better able to help. And you might want to consider looking up security design patterns and using established libraries instead of coding every single thing yourself.
    – schroeder ♦
    Jul 14, 2021 at 11:20
  • Hi, I get your point. I am actually asking for a list of to-dos to ensure that my admin panel is safe.
    – AD-1
    Jul 14, 2021 at 16:21
  • There is no "to do list". I'm saying that you need to look at design patterns based on your context. It's like asking "what do I need to do to be healthy?". It's not answerable. Lots of endless possible lists. No answers.
    – schroeder ♦
    Jul 14, 2021 at 16:37
  • Right. Got you.
    – AD-1
    Jul 14, 2021 at 19:29

1 Answer 1

Reset to default
1

The most powerful and simplest security you could add is called mTLS (mutual TLS) combined with Let’s Encrypt for a normal certificate.

With mTLS you create a client side certificate that must be used with each connection initiated, using cryptographicly sound keys.

If you want to learn more about it smallstep have a open source ca and other tools to manage these things.

There are other ways but most offer less security for more work.

Finally any website must be secure from the standard OWASP list like XSS, sql injection l, remote code execution… etc

Improve this answer
3
  • Hi, thx for your answer. However, is there something which would be less complicated to setup? Something like requiring a password, etc.? I am still a noob when it comes to SSL and TLS, so I would like to use something which is less complicated.
    – AD-1
    Jul 14, 2021 at 10:03
  • 2
    @AD-1 all solutions are complicated. But there are good resources to help you like smallstep.com/hello-mtls setting up something else means you have to verify it works as intended, in all cases… which is hard.
    – LvB
    Jul 14, 2021 at 10:10
  • I got your point.
    – AD-1
    Jul 14, 2021 at 16:21

Not the answer you're looking for? Browse other questions tagged .