Password & Account Security Service

Store credentials, 2FA secrets, recovery tokens and trusted devices behind one service — with ready-made account workflow pages.

🔑

Credential Storage

Password hashes, rotation dates and expiry kept out of your other services. Plaintext is never stored or returned twice.

🔐

TOTP enrollment and mid-login verification, with authenticator app setup pages included.

🎫

Short-lived tokens for reset links, unlock links and login challenges — stored as HMAC hashes only.

🖥️

Server-rendered recovery, unlock, 2FA and trusted-device pages in English and French, ready to white-label.

📱

Let users remember a browser for a limited time so 2FA is not prompted on every sign-in.

🎛️

Manage passwords, policies, tokens and devices through an Angular web interface.