new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

authentication/reauthentication

8 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Require re-authentication for sensitive features

Require the current credentials for an account before updating sensitive account information such as password or email address, or before sensitive transactions such as shipping a purchase to a new address. This mitigates CSRF and session hijacking attacks and prevents attackers from executing sensitive transactions through CSRF or XSS attacks, and from taking over sessions through temporary physical access or session ID theft.

Re-authenticate on suspicious account activity

Trigger re-authentication when unusual login patterns, IP address changes, or device enrollments occur.

Re-authenticate after account recovery

Trigger re-authentication after users reset their passwords or change sensitive account details.

Re-authenticate for critical account actions

Trigger re-authentication for high-risk actions like changing payment details or adding new trusted devices.

Use adaptive authentication based on risk

Use risk-based authentication models that adapt to the user's behavior and context to minimize user friction while maintaining security.

Use MFA for re-authentication

Require an additional layer of verification using Multi-Factor Authentication for sensitive actions or events.

Use challenge-based verification for re-authentication

Prompt users to confirm their identity with a challenge question or secondary method for re-authentication.

Invalidate sessions after re-authentication

After re-authentication, invalidate sessions and rotate tokens according to the OWASP Session Management Cheat Sheet.

Give your agent this brain