Authgear

What is TOTP? Time-based One-Time Password Explained TOTP (Time-based One-Time Password) is one of the most widely used methods for 2FA and MFA. It adds an extra layer of security by generating short-lived codes that change every 30 seconds. In this guide, we explain: ✔️ How TOTP works under the hood ✔️ Why it’s important for 2FA and MFA ✔️ Common use cases and real-world examples ✔️ How to implement TOTP with practical tips Read the full article 👉 https://lnkd.in/gKaXUeGn #TOTP #2FA #MFA #Authentication #CyberSecurity

The Complete Guide to Machine-to-Machine (M2M) Authentication How do services authenticate with each other without human users involved? If you’re building APIs or backend services, M2M (machine-to-machine) authentication is the key to keeping them secure. In this guide, we cover: ✔️ How M2M tokens work ✔️ Implementing OAuth 2.0 Client Credentials ✔️ Hosting JWKS and rotating keys ✔️ Securing service-to-service authentication with code samples in curl, Node.js, Python, and Go Check it out here 👉 https://lnkd.in/gj8kjxUS #OAuth2 #M2M #APISecurity #Authentication #IdentityAndAccessManagement

🚀 Big news from Authgear — we’ve just rolled out M2M Authorization! We’re excited to introduce Machine-to-Machine (M2M) Authorization — making it easier than ever for backend services, CLI tools, scheduled jobs, and IoT devices to securely connect to your APIs. ⚡ Common use cases: Secure microservice-to-microservice communication CLI tools accessing APIs with short-lived tokens Scheduled jobs & background tasks  IoT devices sending data to the cloud independently All built on the OAuth2 Client Credentials Flow. Learn more and get started with M2M apps:  https://lnkd.in/guXPc8YE #M2M #MachineToMachine #Authorization #APISecurity #OAuth2

🎨 Make Your Login Page Truly Yours. A great login experience isn’t just functional — it’s conversion-ready. With Authgear, you can build login flows that match your brand, reduce friction, and drive growth from the very first screen. 👉 Explore real examples in our Login Gallery:  https://lnkd.in/gbDx_nM8 #LoginUX #ProductDesign #ConversionOptimization #Authentication #Authgear

What is JWKS and why should developers care? If you work with JWTs or OAuth, publishing a JWKS (JSON Web Key Set) makes key rotation and signature verification much simpler. I published a practical guide that explains the JWKS format, jwks_uri, PEM→JWK conversion, and rotation best practices. Read it here: https://lnkd.in/ejZ7CCx2 #JWKS #JWK #JWT #Auth #Security #DevTools

🛡️ New: Blocking Events — Protect Login Flows Before They Happen With the new Blocking Events, you can stop suspicious authentication attempts directly in your signup or login flow. Define custom logic based on risk signals like email, roles, time of day, or GeoIP to: 🔒 Block risky login/signup attempts 🤖 Enable CAPTCHA dynamically 📲 Trigger 2FA only when needed 🛑 Apply contextual rate limiting 👉 Learn more: https://lnkd.in/gXJJGjmA #Authgear #IdentityPlatform #DevTools #Authentication #CustomHooks #Webhooks #Security #UserManagement

🎥 Introducing Authgear ONCE — Your Self-Hosted Identity Infrastructure Need full control over your authentication? Want to run secure login flows on your own infrastructure — with no monthly fees? Meet Authgear ONCE, our self-hosted identity platform built for teams that care about: ✅ One-time license — no monthly fees ✅ Full-featured, production-ready auth server ✅ Self-managed for maximum data control and compliance This video gives you a quick look at how ONCE works — and why it’s built for developers and teams that need flexibility, performance, and control. 👉 Learn more Authgear ONCE: https://www.authgear.com/ #AuthgearONCE #SelfHosted #Authentication #IdentityPlatform #DevTools #CyberSecurity #LoginUX #ProductLaunch

🛠️ Feature Highlight: Authentication Flow API Want complete control over your authentication experience? Authgear’s Authentication Flow API lets you go beyond pre-built UI components to design exactly the login, signup, and onboarding flows you want. By default, Authgear projects come with AuthUI — which already supports theme, color, and logo customization. But sometimes you need more: ✅ Build your own custom authentication UI from scratch ✅ Use any programming language or framework you prefer ✅ Fully tailor login, signup, password reset, and other flows to your product experience Whether you need to match complex brand guidelines, support non-standard user journeys, or deliver a seamless in-app experience — the Authentication Flow API gives your team the power and flexibility to make it happen. 👉 Learn more about building with the Authentication Flow API: https://lnkd.in/gHTschTu 👉 Try our sample quick registration flow: http://portal.authgear.com #Authgear #IdentityPlatform #DeveloperTools #CustomAuth #UserExperience #ProductDesign

🚀 We’re live on Product Hunt: Authgear ONCE We're thrilled to launch Authgear ONCE — our self-hosted identity solution, now featured on Product Hunt! For teams that want full control over their authentication, Authgear ONCE offers all the power of our cloud service, but deployed entirely on your own server: ✅ One-time license — no monthly fees ✅ Full-featured, production-ready auth server ✅ Self-managed for maximum data control and compliance Authgear ONCE is built for developers who need secure, flexible, branded login flows — without the complexity of building auth in-house. We'd love your feedback and support on Product Hunt! 👉 Check it out here: https://lnkd.in/gY5JejN4 #AuthgearONCE #ProductHuntLaunch #IdentityInfrastructure #Authentication #SelfHosted #DevTools

⚡ At Authgear, we are proud to support innovators like Cornerstone Technologies Holdings Limited as they drive the future of electric vehicle (EV) infrastructure on a global scale. Based in Hong Kong, Cornerstone is a leader in providing comprehensive EV charging solutions—serving individual consumers, businesses, and government agencies with a growing international presence. Recently, Cornerstone faced the challenge of revamping their CPO portal, a critical platform for managing staff logins across their extensive charger network. With a tight deadline and ambitious plans for global expansion, they needed a secure, scalable authentication solution that could be integrated quickly and flexibly. Authgear’s low-code approach enabled Cornerstone to launch their revamped portal on time, meeting both their development goals and the evolving needs of their clients. Our turnkey authentication platform delivered immediate value: ➡️ Faster development cycles thanks to streamlined integration—no extensive coding required. ➡️ Enhanced security features that safeguard client data and support robust access management. ➡️ Scalability and flexibility to adapt to diverse client requirements, including white-label solutions and enterprise sign-in integrations. 🗣️ As CK Lee, Engineering Manager at Cornerstone, shared: “𝘈𝘶𝘵𝘩𝘨𝘦𝘢𝘳 𝘸𝘢𝘴 𝘢 𝘯𝘰-𝘣𝘳𝘢𝘪𝘯𝘦𝘳 𝘧𝘰𝘳 𝘰𝘶𝘳 𝘥𝘦𝘷𝘦𝘭𝘰𝘱𝘮𝘦𝘯𝘵 𝘵𝘦𝘢𝘮. 𝘛𝘩𝘦𝘪𝘳 𝘵𝘶𝘳𝘯𝘬𝘦𝘺 𝘴𝘰𝘭𝘶𝘵𝘪𝘰𝘯 𝘢𝘭𝘭𝘰𝘸𝘦𝘥 𝘶𝘴 𝘵𝘰 𝘲𝘶𝘪𝘤𝘬𝘭𝘺 𝘪𝘮𝘱𝘭𝘦𝘮𝘦𝘯𝘵 𝘢 𝘴𝘦𝘤𝘶𝘳𝘦 𝘢𝘯𝘥 𝘴𝘤𝘢𝘭𝘢𝘣𝘭𝘦 𝘢𝘶𝘵𝘩𝘦𝘯𝘵𝘪𝘤𝘢𝘵𝘪𝘰𝘯 𝘴𝘺𝘴𝘵𝘦𝘮 𝘸𝘪𝘵𝘩𝘰𝘶𝘵 𝘵𝘩𝘦 𝘯𝘦𝘦𝘥 𝘧𝘰𝘳 𝘦𝘹𝘵𝘦𝘯𝘴𝘪𝘷𝘦 𝘤𝘰𝘥𝘪𝘯𝘨. 𝘛𝘩𝘪𝘴 𝘴𝘢𝘷𝘦𝘥 𝘶𝘴 𝘷𝘢𝘭𝘶𝘢𝘣𝘭𝘦 𝘵𝘪𝘮𝘦 𝘢𝘯𝘥 𝘳𝘦𝘴𝘰𝘶𝘳𝘤𝘦𝘴 𝘥𝘶𝘳𝘪𝘯𝘨 𝘢 𝘤𝘳𝘪𝘵𝘪𝘤𝘢𝘭 𝘥𝘦𝘷𝘦𝘭𝘰𝘱𝘮𝘦𝘯𝘵 𝘱𝘩𝘢𝘴𝘦.” 🚀 We’re excited to empower Cornerstone as they expand globally, providing the secure and adaptable authentication foundation needed to accelerate the EV revolution. If your organization is looking for a flexible, enterprise-ready authentication solution, discover how Authgear can help you scale with confidence.