Designing Account Systems
So what do you need to think about when a user can login on your website? Let's find out!
Lecture material
Recommended reading
- Security Authentication vs. Authorization | What’s the Difference?
- Symmetric vs. Asymmetric Encryption – What are differences?
- How to spoil the fish with salt and pepper
- About Secure Password Hashing
- BCrypt Explained
- Attackers Don't Bother Brute-forcing Long Passwords, Microsoft Engineer Says
- FBI recommends passphrases over password complexity
- xkcd.com: