Website Advisor uses email-based authentication with secure session management.
Creating an account
Sign up with your email address and a password. You may be asked to verify your email address before running scans, depending on server configuration.
Resetting your password
- Go to the login page and click 'Forgot password'.
- Enter your email address.
- Check your inbox for a password reset link.
- Click the link and set a new password.
- The reset link expires after a limited time for security.
Session security
- Sessions use HMAC-signed cookies that are valid for 7 days.
- Sessions are tied to your account and cannot be transferred.
- Logging out invalidates your current session immediately.
- Rate limiting protects against brute-force login attempts (10 attempts per 15-minute window).