Best Practices for User Account Control

As a web developer, a common task undertaken for nearly any application, is a implementing user account controls. For all of those apps though there are different some fairly universal practices for keeping the accounts secure.

https://cloudplatform.googleblog.com/2018/01/12-best-practices-for-user-account.html?m=1

1.  Hash those passwords

2.  Allow for third-party identity providers if possible

3.  Separate the concept of user identity and user account

4. Allow multiple identities to link to a single user account

5. Don’t block long or complex passwords

6.  Don’t impose unreasonable rules for usernames

7. Allow users to change their username

8. Let your users delete their accounts

9.  Make a conscious decision on session length

10. Use 2-Step Verification

11.  Make user IDs case insensitive

12.  Build a secure auth system