All Questions
3 questions
2votes
1answer
217views
Is this schema between a Desktop App and an API secure?
From my previous question: How secure is this schema between a Desktop App (c++) and an API (php). Introduction I made a paid Desktop-app that required constant internet connection (because of its ...
10votes
3answers
18kviews
Token-based authentication - what's a good token length?
What's a good token character length for a token-based login? Currently I'm using the following code: <?php $token = bin2hex(openssl_random_pseudo_bytes(16)); Is 16 sufficient or should I ...
- 111
7votes
2answers
560views
What to consider when generating random code as part of two-factor authentication?
I want to write a patch for a two factor authentication system that someone else has started. The code is a module for a PHP content management system and sends an SMS message to a user's phone, after ...
- 171
