HACKR.GG
Fundamentals

How Authentication Works

Understand how websites verify who you are — passwords, sessions, tokens, OAuth, and MFA. Essential knowledge before attacking any auth system.

Beginner35 min9 lessons2 hands-on
Start free →I have an account
Free account. No credit card.

You'll be able to

  • ✓Describe session-based and token-based authentication flows
  • ✓Understand how cookies are set, scoped, and stolen
  • ✓Recognise the difference between authentication and authorisation
  • ✓Identify common authentication weaknesses at a glance

Lessons

  1. 1Passwords & How They're Stored
  2. 2Sessions vs Tokens
  3. 3OAuth & Single Sign-On
  4. 4Multi-Factor Authentication (MFA)
  5. 5Common Authentication Failures
  6. 6Your Turn: Carry the TokenHANDS-ON
  7. 7Inspecting Auth in Practice
  8. 8Brute-Forcing Logins with ffufHANDS-ON
  9. 9Module quiz
Start free →