Тёмный

Multi-factor Auth + RLS in PostgreSQL 

Supabase
Подписаться 35 тыс.
Просмотров 3 тыс.
50% 1

Multi-factor authentication (MFA), sometimes called two-factor authentication (2FA), adds an additional layer of security to your application by letting you verify users’ identity through extra steps. This typically consists of something you know, like a password, and something you have, like an authenticator application. We built MFA in response to customer requests - developers wanted enhanced security - be it for compliance, client requirements, or simply for peace of mind. As such, we started by building MFA support for Time-Based One Time Passwords (TOTP).
Blog post: supabase.com/b...
Try Supabase for free: app.supabase.c...
6️⃣ See all Launch Week announcements: supabase.com/l...

Опубликовано:

 

16 окт 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 2   
@strmchsr1537
@strmchsr1537 Год назад
So in (pretty) short: Why does one need Multi-Factor Auth (MFA)? If you have an account with only your email and password (something you know/remember, one factor) and somehow someone is able to get your credentials then the attacker will probably be able to login without any issues. If your account has MFA setup, now the attacker also has to have access to an extra factor, like for example your phone number (when using SMS) or a one-time password (an app), etc. Email/Password combinations are floating around the internet because of hacked services / databases and who knows what happens in the future, so it's not that uncommon. So even if an attacker has your credentials, he/she will still be stopped because the attacker also needs access to that extra factor e.g. needs either physical access (to your phone AND able to login to that phone) or the MFA setup was compromised, both are so much harder to do that unless you're the president of a country or something, no one will bother. That extra layer of protection is so hard to beat every self-respecting service should implement this (unless impact is really low). But I guess it's always a battle between convenience and security.
@jonathangamble
@jonathangamble Год назад
Let's get local realtime working guys shall we! Been broken for a while now...
Далее
Kerberos Authentication Explained | A deep dive
16:52
Просмотров 348 тыс.
Outsmarted 😂
00:20
Просмотров 4,1 млн
Firebase vs Supabase - I Built The Same App With Both
6:21
How to Protect against Token Theft | Conditional Access
26:48
Row Level Security with @Supabase  - Course part 3
14:08
Outsmarted 😂
00:20
Просмотров 4,1 млн