Alvaro Navarro

No More Post-its: Boost your login security with APIs

Is your two-factor authentication vulnerable to SIM swap fraud? Learn how to use APIs to detect suspicious activity before it's too late.

No More Post-its: Boost your login security with APIs
#1about 5 minutes

Understanding the vulnerabilities of password-based authentication

Passwords are a major security risk because they are easily forgotten, guessed, or cracked, as demonstrated by common password lists and data breaches.

#2about 2 minutes

Implementing two-factor authentication with the Verify API

Add an extra layer of security by implementing two-factor authentication (2FA) using one-time passwords (OTP) delivered via SMS, voice, or other channels with an API.

#3about 2 minutes

Verifying phone numbers and preventing SIM swap attacks

Ensure the phone number receiving an OTP is valid and protect against SIM swap fraud by checking for recent SIM card changes using dedicated APIs.

#4about 2 minutes

Creating a seamless login with silent authentication

Authenticate users frictionlessly in the background by verifying their identity through their mobile data connection and SIM card without requiring manual input.

#5about 2 minutes

Using biometrics and location as authentication factors

Incorporate advanced authentication factors like biometrics for "something you are" and geolocation for "somewhere you are" to further enhance security.

#6about 2 minutes

A summary of APIs for multi-layered security

A recap of the various APIs available to build a robust, multi-layered authentication system covering what you know, have, are, and where you are.

Related jobs
Jobs that call for the skills explored in this talk.

Matching moments

Malware campaigns, cloud latency, and government IT theft
01:06 MIN

Malware campaigns, cloud latency, and government IT theft

Fake or News: Self-Driving Cars on Subscription, Crypto Attacks Rising and Working While You Sleep - Théodore Lefèvre

Crypto crime, EU regulation, and working while you sleep
01:15 MIN

Crypto crime, EU regulation, and working while you sleep

Fake or News: Self-Driving Cars on Subscription, Crypto Attacks Rising and Working While You Sleep - Théodore Lefèvre

Preventing exposed API keys in AI-assisted development
03:45 MIN

Preventing exposed API keys in AI-assisted development

Slopquatting, API Keys, Fun with Fonts, Recruiters vs AI and more - The Best of LIVE 2025 - Part 2

The importance of client-side encryption for AI features
03:16 MIN

The importance of client-side encryption for AI features

AI in the Open and in Browsers - Tarek Ziadé

Prompt injection as an unsolved AI security problem
07:39 MIN

Prompt injection as an unsolved AI security problem

AI in the Open and in Browsers - Tarek Ziadé

The security risks of AI-generated code and slopsquatting
05:55 MIN

The security risks of AI-generated code and slopsquatting

Slopquatting, API Keys, Fun with Fonts, Recruiters vs AI and more - The Best of LIVE 2025 - Part 2

Playing a game of real or fake tech headlines
04:17 MIN

Playing a game of real or fake tech headlines

WeAreDevelopers LIVE – You Don’t Need JavaScript, Modern CSS and More

Understanding browser APIs that rely on company services
04:30 MIN

Understanding browser APIs that rely on company services

Developer Time Is Valuable - Use the Right Tools - Kilian Valkhof

Featured Partners

Related Videos

See all videos
Going Beyond Passwords: The Future of User Authentication27:55

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

Passwordless future: WebAuthn and Passkeys in practice32:32

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

Skynet wants your Passwords! The Role of AI in Automating Social Engineering31:19

Skynet wants your Passwords! The Role of AI in Automating Social Engineering

Wolfgang Ettlinger & Alexander Hurbean

Passwordless Web 1.530:21

Passwordless Web 1.5

Paweł Łukaszuk

Programming secure C#/.NET Applications: Dos & Don'ts33:29

Programming secure C#/.NET Applications: Dos & Don'ts

Sebastian Leuer

Architecting API Security47:34

Architecting API Security

Philippe De Ryck

Deep Fakes: The Lies We Can’t See24:49

Deep Fakes: The Lies We Can’t See

George Proorocu

Cracking the Code: Decoding Anti-Bot Systems!57:47

Cracking the Code: Decoding Anti-Bot Systems!

Fabien Vauchelles

Related Articles

View all articles
CH
Chris Heilmann
The top 200 passwords of 2024 can be cracked in less than a second
Passwords are a pain and with biometric logins, passkeys and other two factor authentication methods should be a thing of the past. In reality, though, a lot of systems still use username and password as the only security measure and users choose al...
The top 200 passwords of 2024 can be cracked in less than a second
DC
Daniel Cranney
Dev Digest 167: Open Source AI, Passwordless Microsoft and Vibe Coding
Inside last week’s Dev Digest 167 . 🖼️ Is vibe coding killing creativity? 🌳 Is ChatGPT not as bad for the environment as we think? ⚠️ 95% of AppSec fixes don’t reduce risks 🔑 Microsoft going passwordless 🧠 How to detect memory leaks in your apps 🟨 V...
Dev Digest 167: Open Source AI, Passwordless Microsoft and Vibe Coding

From learning to earning

Jobs that call for the skills explored in this talk.