Securing Laravel
  • Home
  • In Depth Articles
  • Security Tips
  • Archives
  • About
  • Sponsor
  • Laravel Security Audits & Pentests
  • Practical Laravel Security Course
Sign in Subscribe
Newsletter

Oops, broken link...

The teams discount link was broken

Stephen Rees-Carter

Stephen Rees-Carter

26 Nov 2021

This post is for subscribers only

Subscribe now

Already have an account? Sign in

Read more

Security Tip: Password Resets and MFA?

Security Tip: Password Resets and MFA?

[Tip #120] How should we safely handle resetting forgotten passwords without compromising the protection that MFA provides?

By Stephen Rees-Carter 22 Aug 2025
Security Tip: Account Recovery for MFA?

Security Tip: Account Recovery for MFA?

[Tip #119] What happens if your users lose their MFA tokens, and they never saved their recovery codes? Can you safely give them back access to their accounts?

By Stephen Rees-Carter 14 Aug 2025
Security Tip: 2FA Isn't Just For Logins!

Security Tip: 2FA Isn't Just For Logins!

[Tip #118] Account passwords are easy to compromise, so why are you relying on them to verify users within your app? If your users log in with a 2FA Token, then they should be able to prove it before performing other sensitive activities too.

By Stephen Rees-Carter 09 Aug 2025
In Depth: Setting up Two-Factor Authentication!

In Depth: Setting up Two-Factor Authentication!

[In Depth #37] It's time to finally fulfil one of the most common requests for an In Depth article: setting up 2FA! 🎉 So let's add some TOTP 2FA to our boring user/pass auth login!

lock-1 By Stephen Rees-Carter 02 Aug 2025
Securing Laravel
  • Subscribe
  • In Depth Articles
  • Security Tips
  • Archives
  • Sponsor
  • Stephen's Socials
Powered by Ghost

Securing Laravel

The essential security resource for Laravel developers.