Tagged articles

recovery codes

2 articles · Page 1 of 1
LuTiao Programming
LuTiao Programming
Nov 6, 2026 · Information Security

Complete Java Account Security Recovery: Reclaiming Accounts After Compromise

This article details a comprehensive Java implementation for secure account recovery, covering threat modeling, recovery challenge design, assurance scoring, leveraging pre-compromise credentials like Passkeys and recovery codes, security versioning to invalidate attacker sessions, post-recovery audits, and rate limiting to prevent abuse.

Java securityOWASP guidelinesPasskey
0 likes · 28 min read
Complete Java Account Security Recovery: Reclaiming Accounts After Compromise
LuTiao Programming
LuTiao Programming
Nov 2, 2026 · Backend Development

Complete Java TOTP 2FA Implementation: QR Binding, Replay Protection & Recovery Codes

This article details a production-ready Java implementation of TOTP two-factor authentication covering QR code binding, secret encryption, time-drift handling, replay attack prevention via atomic step consumption, rate limiting, recovery codes with hashed storage, and secure 2FA disable flows requiring re-authentication.

JavaQR code bindingRFC 6238
0 likes · 23 min read
Complete Java TOTP 2FA Implementation: QR Binding, Replay Protection & Recovery Codes