Web Security / Sessions and logins
Lesson 17 of 27
Multi-factor for your users
Offering TOTP authenticator apps or passkeys protects users even when their password leaks somewhere else.
Key points
- TOTP: 6-digit codes from an app
- Passkeys can't be phished
- Give backup codes
Quiz · +10 XP
Which login method resists phishing best?
Log in to save progress and earn XP.