Exercises

It’s time to apply the knowledge you’ve acquired in this chapter with the proposed exercises.

Exercise 1 – WebAuthn authentication

In this exercise, you will enable WebAuthn authentication on your account, as described in the first part of this chapter. Please note that you will need a device that supports FIDO2 or FIDO U2F authenticators such as TouchID, FaceID, Windows Hello, or similar technologies.

Requirements

Please note that to enable and use WebAuthn authentication, your website must be configured to use HTTPS with a valid/trusted SSL certificate (such as Let’s Encrypt or another valid certification authority).

After enabling the WebAuthn authentication method for your account, log out from your website backend and try to log in again, typing your username and clicking on the Web Authentication button, then using the authenticator you configured.

Exercise 2 – multi-factor authentication

In this exercise, you...