Cybersecurity — Authentication

Authentication factors

1. Something you know: Passwords
2. Something you have: Tokens
3. Something you are: Biometrics

Password hashing

import bcrypt

# Hash password
password = b"secure_password"
hashed = bcrypt.hashpw(password, bcrypt.gensalt())

# Verify password
if bcrypt.checkpw(password, hashed):
    print("Password matches")

Multi-factor authentication

import pyotp

# Generate secret
secret = pyotp.random_base32()
totp = pyotp.TOTP(secret)

# Generate code
code = totp.now()

# Verify code
if totp.verify(code):
    print("MFA verified")

OAuth 2.0

Client → Authorization Server → Resource Server
   ↓
Access Token

Best practices

1. Use MFA everywhere
2. Hash passwords properly
3. Implement account lockout
4. Use secure session management

Mini Practice

1. Implement password hashing
2. Set up TOTP MFA
3. Configure OAuth flow
4. Test authentication

Up Next

Continue with Authorization - Access control.