How to Get Two-Factor Authentication Right
Requiring a second factor at sign-in in addition to a password, such as a code from an authenticator app, a passkey or a hardware security key. Key takeaways Au...
Lumexa Media · Writing
Working notes from a studio that edits images, cuts video, mixes audio, builds websites, renders 3D and argues about search results. Every article is written by a named person and cites the body that published the figures in it.
5,872 articles across 14 disciplines
Requiring a second factor at sign-in in addition to a password, such as a code from an authenticator app, a passkey or a hardware security key. Key takeaways Au...
Using OAuth 2.0 and OpenID Connect to let users sign in with accounts from providers such as Google, Apple or Microsoft, or to let apps access APIs on a user�...
HTTP requests one system sends to another when an event happens, such as a payment succeeding or an order shipping, so the receiving system can react immediatel...
A protocol that keeps a two-way connection open between browser and server, used for chat, live dashboards, notifications and collaborative editing. Key takeawa...
Making HTTP requests from the browser with fetch, and handling the failures that happen on real networks, from timeouts to server errors. Key takeaways fetch be...
The browser storage options for websites, from localStorage and sessionStorage for small values to IndexedDB for larger structured data. Key takeaways localStor...
Storing, calculating and displaying dates and times correctly for users in different time zones, including daylight saving changes. Key takeaways Storage conven...
Formatting numbers, currencies, dates, lists and plural forms correctly for each language and region using JavaScript's built-in Intl API. Key takeaways St...
Accepting files from users, such as images, documents and CVs, without letting attackers upload malware or executable files to your server. Key takeaways Valida...
How contact forms, receipts and password resets get delivered from a website, using an authenticated mail service rather than the web server's default mail...
Moving slow work, such as sending emails, processing images or calling external APIs, out of the web request into background jobs processed by workers. Key take...
Recording application events and errors, and alerting the team when something breaks, so problems are found before customers report them. Key takeaways OWASP gu...
Showing 5,556 of 5,872
Send us something real and we will do it to your brief — no card, no commitment. If the standard is not what you need, you have lost nothing.