I built new web application.
In my login system I make remember me check box,
If user clicks on that then his/her username and password will stored in cookies so for next time they will logged in without any asking those credentials. Is that a secure way? or what else a good way for better security issue?
Asked
Active
Viewed 18 times
0
-
if the cookie is stolen, then the account is lost – schroeder Apr 22 '20 at 11:06
-
There is a LOT already written on this. This was my first google hit: https://stackoverflow.com/questions/244882/what-is-the-best-way-to-implement-remember-me-for-a-website – schroeder Apr 22 '20 at 11:07
-
No this is not secure. Do not implement this. It is best to use either existing frameworks which offer this functionality (e.g Django or Laravel). Also have al ook here: https://www.troyhunt.com/how-to-build-and-how-not-to-build/ – roy.stultiens Apr 22 '20 at 11:07