A credential-stuffing attack of 10,000 attempts a minute is rate-limited and blocked at login; a sign-in protected by a stored argon2id hash and a number-matching MFA prompt; a passkey that removes the password; and the eight-stage authentication pipeline — policy, storage, login, MFA, recovery, sessions, passwordless and monitor.

CY-MID-063Mid Level · Authentication Security

Password & Authentication Security — The Authentication Pipeline

A hands-on mid-level course that builds authentication attackers can't walk through. Work the authentication pipeline - eight stages: Policy, Storage, Login, MFA, Recovery, Sessions, Passwordless, and Monitor - hashing right, adding phishing-resistant MFA, and defending against credential stuffing and account takeover. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Set modern password policy and hash credentials correctly.
Add phishing-resistant MFA and secure account recovery.
Manage sessions safely and adopt passwordless where it fits.
Defend against credential stuffing and account takeover.

Price:৳8,000