Security

This module is meant to easily allow a Drupal developer to configure per-entity message authentication codes.

This module provides an EncryptionMethod plugin for the Drupal 8 Encrypt module.
It uses the 3rd party PHP Secure Communications Library to provide AES encryption.

Warning:

It is strongly adviced to use an encryption method that has been recommended by the Encrypt module maintainers. Usage of this module is discouraged.

Google Authenticator or 2 Factor Authentication is a highly secure & easy to set up for your Drupal site. Rather than relying on a password alone, which can be phished or guessed, miniOrange adds a second layer of security to your Drupal accounts. It protects your site from hacks and unauthorized login attempts. This module also includes a secure method for Multifactor Authentication (MFA).

This module will give you advanced notice that your security certificates are about to expire. Currently works with HTTPS certificates and simpleSAMLphp service provider certificates. Drupal 8 version coming soon.

This Drupal module performs OWASP-compliant login velocity check by
comparing geolocation of user's current IP address against
geolocation of same user's IP address during previous login session
within time period specified in module's settings.

SAML IDP Module for Drupal. Drupal SAML 2.0 Identity Provider allows users residing in your Drupal site to login to your SAML 2.0 compliant Service Provider. This allows for Single Sign On into connected applications. We support all known Service Providers.

The JSON Web Token (JWT) Authentication module provides a Drupal authentication provider that uses JWTs as the primary factor of authentication.

What is a JSON Web Token?

Reports accurate update status for Drupal 6 modules now that Drupal 6 is End-of-Lifed and most contrib modules are unsupported by the community.

It does four main things:

This module provides drush commands for setting up correct file permissions in your Drupal instance.

It takes care of creating sites/default/files and sites/default/private on your Drupal installation and updating them in variables table, so you don't have to do that through the UI. It also takes care of creating .htaccess files in those subdirectories. But most importantly it maintains correct permissions on those directories.