Credential Stuffing

Use the this demo below to see how Fingerprint protects your login page from account takeover even if your credentials are stolen.

In this demo, the login attempts from an unknown device are challenged even if the attacker knows the correct credentials and repeated attempts to log in from the same browser are blocked.

See on GitHubSee technical tutorial

How to use this demo

  1. Put in the username user and password password.
  2. Click Log in. You won't be able to log in despite having the correct credentials.
  3. Try calling the login endpoint directly or using JavaScript to spoof the request ID and visitor ID.
  4. Try to login with different passwords. You will be blocked after 5 attempts.
  5. Try using incognito mode to log into this page.
  6. You can reset this scenario using the Restart button on the top right.

Learn more

Use case tutorial
Credential Stuffing
Use case
Account takeover