Security

Locker is a site authentication module using session to forbid access and hide website. One is required to login to gain access to the website. Locker is not a replacement for Drupal authentication but it serves as an additional layer to hide your Drupal site from public. Locker is an alternative to HTTP Auth standard and recommended to be used in case your server doesn’t support HTTP Auth or you don’t have permission to set it up or you want additional features that Locker module provides.

WARNING - files will be still accessible via direct links!

Developed by Reload, sponsored by Scribo.

This module allows the site admins to restrict access to certain paths or the entire site, based on the visitor's IP address.

It allows users with a certain role to bypass the system, it allows a list of paths to bypass the system and it allows you to make a list of paths which can only be seen by whitelisted IPs, and another list which can not be accessed by blacklisted IPs.

This module uses a few of variables in settings.php to configure environment dependent access list by origin IP.
Use it to limit access to sensitive URLs to only certain IPs (e.g., your office).

The module throws a very unsexy and un-meaningful error message which will be useless for unwanted visitors, but will allow developers and site owners to understand why they are getting it.

This module is perfect to quickly block the possibility of getting to your site's management area if your'e not in a specific place or using the right VPN connection.

Block Search engine from indexing site and also unauthorized access while in development or in any condition you want to keep sites secure from others.

If you don't want to put your site in maintanance mode but want to prevent early access to your website during its development, then this module is very helpful for you.

Overview

Provides login integration with http://auth0.com (paid subscription needed!)

From the auth0 website:

[auth0 provides] Zero friction identity infrastructure, built for developers...A cloud service, APIs and tools that eliminate the friction of identity for your applications and APIs

This module integrates the auth0 signin widget with Drupal to act as an alternative single-sign-on solution.

Securimage CAPTCHA provides a way for users of forms to verify they are human by entering a series of characters read from an image or audio sample. Compared to other CAPTCHA methods, Securimage:

Encrypt Password is a simple module to encrypt the hashes of user passwords. It provides an extra level of security beyond using a salt and employing multiple iterations of the hashing algorithm. This module does not change or override Drupal's standard hashing functions and it will not allow you to make users' plaintext passwords retrievable.

The settings page provides the following options:

This module adds the ability to encrypt supported Form API elements by adding an '#encrypt' property. It requires the Encrypt module to do the actual encryption and decryption.

The 7.x-2.x release has been refactored to work with Encrypt 2.x, meaning it now supports encryption configurations. It is also more stable, with some previously reported bugs fixed.

This sandbox is obsolete. See its successor at https://www.drupal.org/project/password_strength

Overview

Allows other information to be displayed for log events.
I created this module as I would often find myself searching for an ip address of an event to see where the user was based.
This module overrides the standard event log page outputting the same and also allowing other modules to easily add more rows/info to the log report page (D7 hook, or D8 plugin).

Features

Currently it adds