Security

Active Session is a module that allows a user to see if there is more than one session opened for their user and allows them (with permissions) to end other sessions belonging to their user. There is also an interface where a user with permissions can view all active sessions and close them.

Active Session creates a block that, by default, is placed in the footer of the page for users with 'view own sessions' or 'view all sessions' permissions to see and get more details about the sessions.

This simple module creates a trigger that works with the Drupal Core triggers module and allows for an email to be sent to both the old and new email addresses upon email address change. This allows the user to know when their address has been changed, even if they aren't the one who changed it.

This is simple module that adds a trigger when a user email address is updated. It uses the built-in trigger module from Drupal core.

The trigger can be setup at admin/structure/trigger/user.

sweetCaptcha is a fresh, friendly, action-based CAPTCHA service that’s easy for you to add to your website
and less frustrating for users to solve than difficult-to-decipher text-based CAPTCHA

http://sweetcaptcha.com/

Why do people love sweetCaptcha?

This module requires users to access the site from an IP on a whitelist in order to maintain a session. Users not on a whitelisted IP can not login and existing sessions will be killed.

This is useful when a site should only allow a small content team to login from a know location (like the office and company VPN). This module is only useful for site where end users never login, such as brochureware sites.

Parrotify is a revolutionary anti-bot instrument.

Parrotify represents a mechanism for protection against automatic actions performed by special software (bots), and it is a source of income for your websites as well!

This is a module to provide password suggestions to users. The suggestions are easier to remember but as tough to crack as what is thought of as hard-to-crack passwords. The suggestions, however, are longer than -- have more characters than -- conventional hard-to-crack passwords. See http://xkcd.com/936/

Installation and usage

This module can be installed like any other. The configuration page can be reached at /admin/config/chbs.

Advanced multi factor authentication for Drupal 8.

• Define security level provided by each type of authentication methods.
• Define security level needed for forms.
• Protect user logins (site and user defined rules).

The module will support the following types of MFA:

User Auth.log

Allows for logging user actions on sensitive/critical administrative pages. Logging is limited to specific users and/or user roles (configurable). Logging only occurs on specific administrative pages (configurable). Features include:

This module allows the users to verify manually fingerprints of SSL certificates. This way man-in-the-middle attacks can be detected.

Supplies randomness in various forms