Lesson 04 · 14 min
Authentication, secrets and monitoring
Argon2id and bcrypt, login limits, MFA, secrets out of git, key rotation and logs that notice an attack.
14 minLesson 4 of 5Practice includedAsk AI on any point
Categories A02, A07 and A09 are easiest to cover together: how to store passwords and keys, how to stop password guessing and how to notice that an attack is already under way. Hashing basics are in the "Authorization and security" course. Here we cover concrete settings and the mistakes people make in production.
Sign in to continue
The rest of this lesson opens after sign up
The first lesson of every course is open without an account. To read on, solve the practice and use Ask, create a free account or log in.