Learn / Level 2

Identity, access and secrets

Passwords, sessions, tokens, and the keys that unlock everything.

1. 01Passwords and hashingHow logins are stored, and how they are cracked.9 min
2. 02Multi-factor authenticationWhat each factor does and where it fails.8 min
3. 03Sessions, cookies and tokensHow a site remembers you are logged in.8 min
4. 04Broken authenticationWhen the login check can be skipped.8 min
5. 05Missing authorizationLogged in is not the same as allowed.8 min
6. 06Secrets in the wildKeys in repos, env files and shell history.10 min