Stop Putting JWTs in LocalStorage. Seriously. Here's How to Do It Right.
October 15, 2025
If you're building a web app and dropping JWTs into localStorage, you might be creating a massive security hole without even realizing it.
Posts tagged with "#security"
3 posts found
Why CSRF token cookies don't need to be httpOnly
July 20, 2024
CSRF token cookies are typically sent without httpOnly set to true. But is that a secure practice?
How to Store Passwords Securely in NodeJS
January 23, 2024
Learn how to use built-in tools in NodeJS to store user passwords securely.