TECHNOLOGY
ZakGT Tech
Security on the ZakGT platform is enforced at four independent layers โ Gmail-only registration filtering, Cloudflare Turnstile CAPTCHA verification, a device account limit of two per fingerprint, and a first-login email verification code with a 10-minute expiry and five attempt maximum. Beyond registration, every API call uses JWT HS256 tokens with bcrypt-hashed passwords and TOTP two-factor authentication for admin accounts. This explainer covers what each layer defends against, how the single-active-device session model protects user accounts from unauthorized access, and what happens when a new device login invalidates an old session.
Full article content coming soon...
Share this article