Free Prompt · Security

Your login
screen is the
easiest way
in

5 holes Claude Code almost always leaves, and the one prompt that fixes them in order.

The 5 holes · fixes unlock when you're in

Session token in localStorage

Any injected script can read it.

FIX: httpOnly, secure, SameSite cookies, sanitised HTML

Admin check in the browser

Anyone with dev tools can flip it.

FIX: enforce roles on the server and in database rules

No email verification or 2FA

People sign up as someone else.

FIX: verify email, offer 2FA, require it for admins

No rate limiting on login or reset

A script can guess until it's in.

FIX: rate limits and lockouts, generic errors

No password rules or breach check

People reuse leaked passwords.

FIX: 12+ characters and a leaked-password check

Enter your details above to unlock the fixes and the prompt

Your loginscreen is theeasiest wayin