How else would you prevent brute force login attempts?

Question

Go

Thomas

How else would you prevent brute force login attempts?

0

19.04.2024

6 ответов

17 просмотров

A X

Keep a counter of bad login attempts right where salted hash of the password is kept. When checking against a given password, check that counter too. If it exceeds a certain threshold, don't let the login attempt to go through. Keep a timestamp too if the functionality has to be restored.

0

1 месяц назад

Thomas Автор вопроса

A X
Keep a counter of bad login attempts right where s...

what if the login requests use a new username every time too

0

1 месяц назад

A X

Thomas
what if the login requests use a new username ever...

Gg. IP address based counting will be needed then.

0

1 месяц назад