Linked Questions

2 votes
1 answer

How to safely "remember" login information in a program [duplicate]

Possible Duplicate: How to Securely Implement a “Remember Me” Feature? I have a program that communicates with a server. The user must log in with the application which runs on their computer, ...
Spiro Xavier's user avatar
0 votes
0 answers

Store login credentials securely with JavaScript [duplicate]

Today I have a web application that needs to store the user's email and password, so that when he opens the login screen, the authentication is done automatically. For this, our application saves the ...
Tom's user avatar
  • 174
0 votes
0 answers

If I store users username and password in cookies, for next time users logged in if they were clicked the remember me, is that a good idea? [duplicate]

I built new web application. In my login system I make remember me check box, If user clicks on that then his/her username and password will stored in cookies so for next time they will logged in ...
Mike john's user avatar
67 votes
21 answers

Lessons learned and misconceptions regarding encryption and cryptology

Cryptology is such a broad subject that even experienced coders will almost always make mistakes the first few times around. However encryption is such an important topic, often we can't afford to ...
makerofthings7's user avatar
24 votes
5 answers

Good session practices

What are some good practices for ensuring logins, session IDs and session content are secure for a website?
James T's user avatar
  • 1,883
18 votes
2 answers

Is it safe to store the password hash in a cookie and use it for "remember-me" login?

I want to store an encrypted string of the password hash in a cookie and use the hash to lookup the user and log them in (if they want to be remembered). Is this safe? The password is one-way hashed ...
Mohamad's user avatar
  • 477
8 votes
4 answers

How to implement a "Remember me" on a mobile app?

I would like to implement a "Remember Me" time-limited auto-login type feature on a mobile application (on Android). To start the app, the user must type in a username and password. For convenience, ...
f20k's user avatar
  • 183
2 votes
3 answers

Implementing 'Remember Me' for a mobile application

I am developing a mobile application wherein I need to implement the 'Remember Me' functionality. There are certain pages within the application which require you to login. What I need to do is, if ...
Karan Thakkar's user avatar
4 votes
2 answers

Remember me feature: do we need a server side token if the cookie is signed by the server?

Every resource I find (I, II, III) about how to implement in a secure way the typical "remember me" login feature, recommends storing a user identifier and an associated unique token in the cookie, ...
Waiting for Dev...'s user avatar
1 vote
1 answer

What are the implications of storing sensitive data in bookmarklets?

While discussing alternatives for asking the browser to remember your password, one guy suggested using a bookmarklet to store users' credentials. The original answer is in portuguese, but I'll ...
mgibsonbr's user avatar
  • 2,935