Website Security
Rate limiting and account lockout: balancing security and access
Set login rate limiting that slows attackers without locking out customers: per-IP versus per-account limits, progressive delays and safe unlocking.
· 6 min read
Blog
Website Security
What a website costs, how domains and hosting actually work, and what to expect from a project — written from the ones we run.
Website Security
What is a brute-force attack and how do websites stop it?
What a brute-force attack is, how password guessing, dictionary attacks and credential stuffing differ, and the layered defences that stop each on a websit…
· 6 min read
Website Security
How to roll out two-factor authentication for website admins
A practical plan to enforce 2FA for website admins: choose methods, set deadlines by role, handle lost phones safely and explain the change to staff.
· 6 min read
Website Security
Two-factor authentication compared: SMS, apps and passkeys
Compare two-factor authentication methods: SMS OTP, authenticator apps, push prompts, security keys and passkeys, with SIM-swap risks and recovery codes.
· 6 min read
Website Security
Password managers for business teams: protecting admin accounts
Why shared admin passwords leak, how a team password manager controls access to hosting and website logins, and a rollout plan for a small business.
· 6 min read
Website Security
Modern website password rules that actually work
Build a website password policy on current guidance: length over complexity, breached password checks, no forced resets and room for passphrases.
· 6 min read
Website Security
Login page security mistakes developers still make
Seven login security mistakes seen in real projects, from username enumeration and weak reset tokens to plain-text passwords, each with a practical fix.
· 6 min read
Website Security
What makes a website login system secure?
Learn what a secure login system needs: password hashing, rate limiting, neutral error messages, safe sessions and account recovery that cannot be misused.
· 6 min read
Website Security
Moving a website to HTTPS without losing traffic
Plan an HTTP to HTTPS migration that keeps rankings: install the certificate, add 301 redirects, fix mixed content, enable HSTS and update Search Console.
· 7 min read
Website Security
HTTPS explained for business owners: what SSL actually protects
What does SSL protect on your website, and what does it leave exposed? Learn how HTTPS encryption works, how DV, OV and EV certificates differ, and key myt…
· 7 min read