Security & Privacy

Keeping your app, users and data safe.

7 free resources

Security & Privacy

DPDP Act: What Founders Should Know Beyond the Basics

20 parts of India's DPDP Act that go beyond consent and deletion, from vendor contracts and breach reports to children's data, nominees and Significant Data Fiduciaries.

Updated 8 Oct 2026
Security & Privacy

DPDP Rules 2025: All 23 Rules for App Founders

Every one of India's 23 DPDP Rules in plain English, with an app example and the date each one starts. Educational summary, not legal advice.

Updated 8 Oct 2026
Security & Privacy

Hidden File Extensions: A Safety Guide

How hidden extensions and names like photo.jpg.exe trick people on Windows and macOS, how to show real extensions, and what to do if you opened a suspicious file.

Updated 8 Oct 2026
Security & Privacy

Homograph Attacks: Spot Fake Look-Alike Links

A 5-minute guide to fake domains that use look-alike letters, how the scam works, and seven simple habits that protect your accounts.

Updated 8 Oct 2026
Security & Privacy

Secure 2FA and MFA: A 10-Minute Developer Guide

How attackers get around 2FA through recovery and reset flows, and how to build TOTP, backup codes and factor changes that hold up. Ends with a production checklist.

Updated 8 Oct 2026
Security & Privacy

Admin 2FA: The 2 Checks Most Tutorials Miss

A 21-page guide to adding TOTP 2FA to an admin panel properly, for Google sign-in or email and password, with replay protection, session rotation and a final checklist.

Updated 8 Oct 2026
Security & Privacy

IDOR and BOLA: A Practical Developer Guide

How changing one ID in a request can expose or edit another user's data, and how to stop it with server-side checks, safe API patterns and Row-Level Security.

Updated 8 Oct 2026