{"componentChunkName":"component---src-templates-blog-list-template-js","path":"/104","result":{"data":{"allMarkdownRemark":{"edges":[{"node":{"excerpt":"There has been a significant surge in formjacking attacks recently. It has been affecting organizations that mostly accept online payment…","fields":{"slug":"/identity/what-is-formjacking/"},"html":"

There has been a significant surge in formjacking attacks recently. It has been affecting organizations that mostly accept online payment from consumers.

\n

In recent times, cryptocurrencies have progressed in both popularity and technical improvements. However, the radical decrease in the value of cryptocurrencies like Bitcoin and Monero has led to cybercriminals looking elsewhere for fraudulent profits.

\n

That being said, what better place to steal your financial information than a product order form on online shopping websites before you even hit the submit button—that's formjacking!

\n

To understand what other threats formjacking pose, let's get to the basics by exploring this unique kind of cyberattack.

\n

What Is a Formjacking Attack

\n

Formjacking is a type of cyber attack in which hackers insert malicious JavaScript code into the target website, most often to a payment page form.

\n

Once the malicious code is in operation, when a consumer enters their payment card information and hits submit, the compromised code sends the payment card number and other sensitive information like the consumer's name, address, and phone number to the hacker.

\n

Hackers send this stolen information to a server for reuse or even sell the personal details on the dark web. While all this happens, the victim is blissfully unaware of their payment details being compromised.

\n

According to the authenticated Symantec Internet Security Threat Report 2019, formjackers hacked 4,818 unique websites each month in 2018. Symantec blocked more than 3.7 million Formjacking attack attempts in that year alone.

\n

Who Is Behind Formjacking Attacks

\n

It is quite complicated for security researchers to pinpoint a single attacker or attack style considering so many unique sites are being attacked simultaneously. However, the majority of formjacking attacks are known to originate from Magecart groups.

\n

Magecart is a club of hacker groups that have been behind the attacks on various websites. Attacks on Ticketmaster, Feedify, British Airways, and Newegg are only some of the Formjacking examples done by this consortium.

\n

The group injects web-based card skimmers onto eCommerce sites to steal payment card data or credit card information and other sensitive information right from online payment forms.

\n

Magecart group started hacking into Magneto online stores; however, they have now altered their strategies and are increasingly using formjacking attacks to steal payment card details.

\n

\n \n \n

\n

How Big Is This Formjacking Campaign

\n

The latest Formjacking campaign conveys that attackers are constantly changing and enhancing their malicious formjacking code and discovering innovative delivery mechanisms to infect users. By the time people even understand formjacking, hackers flee with the information.

\n

For example, Symantec has been digging into telemetry and examining the technical aspects of formjacking attacks to find that 248,000 formjacking attempts were blocked in 2019. But the worrying thing is that such activities are increasing continually as over one-third of those blocks were encountered between September 13 and 20.

\n

What Categories of Businesses Are These Attacks Targeting

\n

Magecart has been targeting eCommerce giants such as Ticketmaster, Newegg, and British Airways to gain larger profits.

\n

Symantec's data showcases that the impacted websites are mostly online retail sites, including small niche sites, to more extensive retail business operations. Websites impacted ranged from a fitness retailer to a supplier of outdoor accessories.

\n

Other online retailers affected included suppliers of parts for vehicles and portals selling gifts or kitchen accessories.

\n

Therefore, it is safe to assume that any company that processes payments on the internet is a probable victim of formjacking attacks.

\n

How Can Formjacking Attacks Affect You

\n

How formjacking attacks can impact your business depends on the type of information the identity thief captures. \"There is some data that can ruin your current day; however, there is some confidential information that can even ruin your complete life,\" says Alex Hamerstone, Practice Lead: Governance, Risk and Compliance at TrustedSec.

\n

You must monitor your bank and credit card statements and keep an eye on your credit scores. Unfortunately, it is almost impossible for victims to identify formjacking attacks, considering most still do not understand what is formjacking, let alone knowing how to detect it.

\n

So, it is solely upon the IT professionals to keep a constant check on their systems to detect and eliminate it, if such a specific threat were to occur.

\n

How Can Businesses Protect Your Credit Card and Other Information From Formjacking

\n

You may not be able to stop Formjacking before it attacks your system, but you can take steps to protect your personal details.

\n

Use credit cards instead of debit cards while shopping online to reduce financial risks. The reason behind this is simple.

\n

If someone uses your credit card information deceptively or indulges in card fraud, they will be exhausting the funds of the credit card companies. In the case of debit cards, the funds are directly tied to your checking account balance.

\n

\n \n \n

\n

How to Prevent Formjacking Attacks

\n\n

Conclusion

\n

Victims don't realize that they have fallen prey to formjacking attacks easily as websites prolong to operate as usual, and Magecart formjacking attackers take steps to stop their detection.

\n

Even with all preventive measures in place, it can still be exceedingly difficult to spot formjacking attacks. However, as an online business, you must have all the protocols in place to quickly alert consumers in the case of such attacks.

\n

\n \n \n

\n","frontmatter":{"date":"January 15, 2021","updated_date":null,"description":"Formjacking attacks are designed and executed by cybercriminals to steal financial and banking details from payment forms that can be captured directly on the checkout pages from eCommerce websites. Find out more about how this practice can affect your business and how to prevent it.","title":"What is Formjacking","tags":["all, Security"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.408450704225352,"src":"/static/fdccc143a05e8d7762360472dedb082a/9a31d/what-is-formjacking.jpg","srcSet":"/static/fdccc143a05e8d7762360472dedb082a/f836f/what-is-formjacking.jpg 200w,\n/static/fdccc143a05e8d7762360472dedb082a/2244e/what-is-formjacking.jpg 400w,\n/static/fdccc143a05e8d7762360472dedb082a/9a31d/what-is-formjacking.jpg 767w","sizes":"(max-width: 767px) 100vw, 767px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.jpg"}}}},{"node":{"excerpt":"What is DNS Cache Poisoning DNS cache poisoning, also known as DNS spoofing, is a cyber-attack that exploits the weaknesses in the Domain…","fields":{"slug":"/identity/dns-cache-poisoning/"},"html":"

What is DNS Cache Poisoning

\n

DNS cache poisoning, also known as DNS spoofing, is a cyber-attack that exploits the weaknesses in the Domain Name System (DNS) servers. It enables the attacker to poison the data in DNS servers, including your company server, by providing false information to your internet traffic and diverting it to fake servers. This is done by redirecting the data in DNS to their IP address.

\n

DNS cache poisoning utilizes the vulnerabilities in the DNS protocols' security to divert internet traffic away from legitimate servers to the wrong address.

\n

DNS cache poisoning is effectively used for phishing attacks, often referred to as Pharming, for spreading malware. In the background, the malware runs and connects with the legitimate servers to steal sensitive information.

\n

When the DNS server is attacked, users may be requested to login into their accounts, and the attacker finds its way to steal the sensitive and financial credentials.

\n

Moreover, phishing attacks also install viruses on the client's computer to exploit the stored data for long term access.

\n

How Does DNS Cache Poisoning Works

\n

DNS spoofing is a threat that copies the legitimate server destinations to divert the domain's traffic. Ignorant of these attacks, the users are redirected to malicious websites, which results in insensitive and personal data being leaked.

\n

It is a method of attack where your DNS server is tricked into saving a fake DNS entry. This will make the DNS server recall a fake site for you, thereby posing a threat to vital information stored on your server or computer.

\n

The cache poisoning codes are often found in URLs sent through spam emails. These emails are sent to prompt users to click on the URL, which infects their computer.

\n

When the computer is poisoned, it will divert you to a fake IP address that looks like a real thing. This way, the threats are injected into your systems as well.

\n

What Are the Different Stages of Attack of DNS Cache Poisoning

\n

\n \n \n

\n\n

The attacker proceeds to send DNS queries to the DNS resolver, which forwards the Root/TLD authoritative DNS server request and awaits an answer.

\n\n

The attacker overloads the DNS with poisoned responses that contain several IP addresses of the malicious website.

\n

To be accepted by the DNS resolver, the attacker's response should match a port number and the query ID field before the DNS response.

\n

Also, the attackers can force its response to increasing their chance of success.

\n\n

If you are a legitimate user who queries this DNS resolver, you will get a poisoned response from the cache, and you will be automatically redirected to the malicious website.

\n

How to Detect DNS Cache Poisoning

\n

Now that we know what is DNS cache poisoning let's understand how to detect it.

\n

One way is to monitor the DNS server for any change in behavior patterns. Also, you can apply data security to DNS monitoring.

\n

Another way is to look for a potential birthday attack. This occurs when there is a sudden increase in DNS activity from a single source in a single domain. When there is an increase in the DNS activity from a single source, querying your DNS server for multiple domain names without recurring shows that the attacker is looking for a DNS entry for poisoning.

\n

Monitor the file system behavior and active directory events for any abnormal activities. You can use analytics for correlating activities among three vectors to add important information to your cybersecurity strategy.

\n

Why Is DNS Cache Poisoning Dangerous for Your Business

\n

When the DNS server is poisoned, it will start spreading towards other DNS servers and home routers. Computers that lookup DNS entries will get the wrong response by causing more users to end up as victims of DNS poisoning.

\n

This issue will be resolved only when the poisoned DNS cache is cleared on each affected DNS server; you are at risk of losing your precious information until then.

\n

One of the major reasons DNS cache poisoning is highly dangerous is that it can spread from one DNS server to another.

\n

Here are a few DNS poisoning attack examples-

\n

A DNS poisoning event had resulted in the Great Firewall of China's temporary escape from China's national borders by censoring the internet in the USA till the problem was resolved.

\n

Recently, attackers targeted WikiLeaks, who used a DNS Cache poisoning attack for hijacking traffic to their WikiLeaks like version. This intentional attack was created to divert the traffic away from WikiLeaks and was implemented successfully.

\n

How To Protect Against DNS Cache Poisoning

\n

For DNS server providers and website owners

\n

If you are a DNS service provider or a website owner, you have a huge responsibility for safeguarding your users by using various tools and protocols to manage the threats.

\n

Some of the resources we have specified will help you in this regard.

\n\n

\n \n \n

\n

For endpoint users

\n

To avoid making your users vulnerable to a DNS poisoning attack, you can use the specified tips.

\n\n

Final Thoughts

\n

DNS cache poisoning can be summarised as an attacker controlling the DNS server to send fake DNS responses. As a result, when the user visits the counterfeit domains, they will be directed to a new IP address selected by the hacker.

\n

This new IP address might be from a malicious phishing website, where the users are prompted to download malware, or they might be asked to provide their financial or login details.

\n

Hence, understanding what is DNS cache poisoning, how to detect it, and ways to prevent it is crucial so you can protect your business against it.

\n

\n \n \n

\n","frontmatter":{"date":"January 13, 2021","updated_date":null,"description":"DNS cache poisoning is an attack that uses changed DNS records to redirect online traffic to a website that is fake and resembles its intended destination.","title":"DNS Cache Poisoning: Why Is It Dangerous for Your Business","tags":["security"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.408450704225352,"src":"/static/f31909dafa2f358eea05d48bd9c92886/9a31d/dns-cache-poisoning-is-dangerous-for-your-business.jpg","srcSet":"/static/f31909dafa2f358eea05d48bd9c92886/f836f/dns-cache-poisoning-is-dangerous-for-your-business.jpg 200w,\n/static/f31909dafa2f358eea05d48bd9c92886/2244e/dns-cache-poisoning-is-dangerous-for-your-business.jpg 400w,\n/static/f31909dafa2f358eea05d48bd9c92886/9a31d/dns-cache-poisoning-is-dangerous-for-your-business.jpg 767w","sizes":"(max-width: 767px) 100vw, 767px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.jpg"}}}},{"node":{"excerpt":"HTTP (hypertext transfer protocol) is a communication protocol that transfers data between client and server. HTTP requests are very…","fields":{"slug":"/engineering/tune-the-go-http-client-for-high-performance/"},"html":"

HTTP (hypertext transfer protocol) is a communication protocol that transfers data between client and server. HTTP requests are very essential to access resources from the same or remote server. In Golang, the net/http package comes with the default settings that we need to adjust according to our high-performance requirement.

\n

For setting up HTTP clients for making requests, most programming languages have different frameworks in place. We will take a hands-on approach in the coming sections to explore how HTTP requests can be made in Golang or Go, as I will refer to the language for the rest of the post.

\n

While working on the Golang projects, I realized that improper configuration of HTTP might crash your server anytime.

\n

In the time when I was working with HTTP Client, I Observed some problems and their solutions, listed below:

\n

Problem:1 Default Http Client

\n

The HTTP client does not contain the request timeout setting by default.\nIf you are using http.Get(URL) or &Client{} that uses the http.DefaultClient. DefaultClient has not timeout setting; it comes with no timeout

\n

Suppose the Rest API where you are making the request is broken, not sending the response back that keeps the connection open. More requests came, and open connection count will increase, Increasing server resources utilization, resulting in crashing your server when resource limits are reached.

\n

Solution: Don't use the default HTTP client, always specify the timeout in http.Client according to your use case

\n
var httpClient = &http.Client{\n  Timeout: time.Second * 10,\n}
\n

For the Rest API, it is recommended that timeout should not more than 10 seconds.\nIf the Requested resource is not responded to in 10 seconds, the HTTP connection will be canceled with net/http: request canceled (Client.Timeout exceeded ...) error.

\n

Problem:2 Default Http Transport

\n

By default, the Golang Http client performs the connection pooling. When the request completes, that connection remains open until the idle connection timeout (default is 90 seconds). If another request came, that uses the same established connection instead of creating a new connection, after the idle connection time, the connection will return to the pool.

\n

Using the connection pooling will keep less connection open and more requests will be served with minimal server resources.

\n

When we not defined transport in the http.Client, it uses the default transport Go HTTP Transport

\n

Default configuration of the HTTP Transport,

\n
var DefaultTransport RoundTripper = &Transport{\n\t...\n\tMaxIdleConns:          100,\n\tIdleConnTimeout:       90 * time.Second,\n\t...\n}\n\nconst DefaultMaxIdleConnsPerHost = 2
\n

MaxIdleConns is the connection pool size, and this is the maximum connection that can be open; its default value is 100 connections.

\n

There is problem with the default setting DefaultMaxIdleConnsPerHost with value of 2 connection,\nDefaultMaxIdleConnsPerHost is the number of connection can be allowed to open per host basic.\nMeans for any particular host out of 100 connection from the connection pool only two connection will be allocated to that host.

\n

With the more request came, it will process only two requests; other requests will wait for the connection to communicate with the host server and go in the TIME_WAIT state. As more request came, increase the connection to the TIME_WAIT state and increase the server resource utilization; at the limit, the server will crash.

\n

Solution: Don't use Default Transport and increase MaxIdleConnsPerHost

\n
t := http.DefaultTransport.(*http.Transport).Clone()\nt.MaxIdleConns = 100\nt.MaxConnsPerHost = 100\nt.MaxIdleConnsPerHost = 100\n\t\nhttpClient = &http.Client{\n  Timeout:   10 * time.Second,\n  Transport: t,\n}
\n

By increasing connection per host and the total number of idle connection, this will increase the performance and serve more request with minimal server resources.

\n

Connection pool size and connection per host count can be increased as per server resources and requirements.

\n

Conclusion

\n

In this article, we discussed the problems around the 'net/http' client default configurations. By changing some of the default settings of HTTP Client, we can achieve a High-performance HTTP client for production use. If you want to learn more about http, here is an interesting post on HTTP security headers If you like what you read, share your thoughts in the comment section.

\n","frontmatter":{"date":"January 12, 2021","updated_date":null,"description":"In this post, we will discuss how to make HTTP requests for higher performance in Go, and also how to tune it.","title":"How to Use the HTTP Client in GO To Enhance Performance","tags":["Golang","HTTP","Performance"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7699115044247788,"src":"/static/68276d4b4277ad09e329598038e91917/14b42/index.jpg","srcSet":"/static/68276d4b4277ad09e329598038e91917/f836f/index.jpg 200w,\n/static/68276d4b4277ad09e329598038e91917/2244e/index.jpg 400w,\n/static/68276d4b4277ad09e329598038e91917/14b42/index.jpg 800w,\n/static/68276d4b4277ad09e329598038e91917/47498/index.jpg 1200w,\n/static/68276d4b4277ad09e329598038e91917/ec6c5/index.jpg 1280w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Mayank Agarwal","github":"mayankagrwal","avatar":null}}}},{"node":{"excerpt":"Introduction How to set up 2FA on your accounts? And why is it important in the first place? As social media is becoming increasingly…","fields":{"slug":"/identity/how-to-setup-2fa-in-online-accounts/"},"html":"

Introduction

\n

How to set up 2FA on your accounts? And why is it important in the first place? As social media is becoming increasingly popular, security is becoming something of supreme importance.

\n

Even though choosing a strong password helps you in certain ways, by adopting 2FA, you can improve and enhance security further. So, let's know more about this extra layer of protection and how to set up 2FA on your accounts.

\n

First stop.

\n

What is Two-Factor Authentication?

\n

2FA is one of the best security methods that use two layers to verify a consumer's identity. This means, rather than simply entering the password to log into an account, two-factor authentication requires a code to be sent via text message to the consumer's phone number or generated through an app.

\n

This type of verification code helps and ensures that only the authorized consumer can access their account. Similarly, multi-factor authentication (MFA) offers two or more authentication layers to approve account access for consumers.

\n

Types of 2FA Methods

\n

SMS Verification is one of the most common forms of 2FA. It involves sending a one-time code via text message to the user's registered phone number. While widely accessible and requiring no internet connection, it is vulnerable to SIM swapping attacks and relies on the reliability of the cellular network.

\n

Authenticator Apps, such as Google Authenticator, Microsoft Authenticator, and Authy, generate time-based codes for authentication. These apps provide offline functionality, making them useful in areas with no network coverage. They are also less susceptible to phishing attacks compared to SMS. However, they require installation and setup on a smartphone, and there is a risk of losing access if the device is lost or reset.

\n

Hardware Tokens, like YubiKey or RSA SecurID, are physical devices that generate codes for authentication. They offer a high level of security since they are not connected to the internet, providing protection against phishing attacks. However, they can be costly to implement for individuals, and there is a risk of losing the hardware token.

\n

Biometric Authentication uses features like fingerprint, face, or iris scans for verification. It offers convenience and a high level of security. However, it requires compatible devices and there is a risk of compromising biometric data.

\n

Backup Codes are pre-generated codes used as a backup when the primary 2FA method is unavailable. They provide access in emergencies but are limited in use and must be securely stored to prevent unauthorized access.

\n

What are Authenticator Apps?

\n

Authenticator apps are meant to be installed on your smartphones to obtain passcodes to sign in to your accounts. They are intended to be more secure than texting; they provide flexibility if you are traveling to a place where there is no mobile service.

\n

Some of the options include Google Authenticator, Microsoft Authenticator Authy, or HDE OTP.

\n

All these apps follow the same procedure - when you are adding a new user account, you need to scan a QR code associated with the account, and it is saved in the app.

\n

The next time you sign in to your app or service, it will ask for a numerical code. You need to open up the authenticator app and check the randomly generated authentication code to access your account securely.

\n

How to Set up 2FA on Your Social Media Accounts?

\n

\n \n \n

\n

Source: Google

\n

2. Snapchat

\n

To set up 2FA on your Snapchat account, you will need to:

\n\n

You can add trusted devices or request a recovery code for when you intend to be somewhere without cellular coverage once 2FA has been activated on your Snapchat account. Safety key logins do not currently appear to be supported by Snapchat.

\n

3. Whatsapp

\n

To set up 2FA on your WhatsApp account, you will need to:

\n\n

\n \n \n

\n

7. Apple iCloud

\n\n

To set up 2FA on your iOS account, the steps will be a bit different. Majorly, it will depend on how you have updated your iOS software.

\n\n

For users using iOS 10.2 or earlier versions, go to Settings under iCloud > Apple ID > Password & Security.

\n\n

Similar to iOS, a few of the steps may vary depending on the version of macOS.

\n\n

8. Instagram

\n

In 2017, two-factor authentication was added by Instagram to the mobile app, which can be activated via the web. If you want to activate 2FA on your mobile device, you need to go to Profile and click on the menu and look for Settings & Security. There you will find two-factor authentication.

\n

With Instagram, you also get to choose between SMS-based verification and a code sent to the authentication app.

\n

\n \n \n

\n

LoginRadius provides multi-factor authentication via SMS, email, automated phone calls, account security questions, and authenticator apps to allow you a customized user experience.

\n

Based on your business, you can choose to use LoginRadius's Identity Platform's Multi-factor authentication, which is an easy process.

\n

Currently, LoginRadius provides its support authentication methods via SMS workflow and Google Authenticator workflow.

\n

For SMS Workflow

\n

You can enable 2FA SMS verification from the LoginRadius admin console. There's also an option to choose your preferred SMS template and SMS provider.

\n

As the first step, you'll need to apply a first verification factor, like standard email and password login, username and password, automated phone call, or access token. The second factor can be a one-time password or code sent via SMS.

\n

\n \n \n

\n

Google Authenticator Workflow

\n

For enabling Google Authenticator, the first step will be to set up your ID in the admin console for Google to identify your website or application on the authenticator.

\n

Next, you will need to set up your QR code specifications or make MFA mandatory.

\n

Similar to the SMS workflow, you can select standard email and password login, username, password, automated phone call, or access token as the verification factor.

\n

Final Thoughts

\n

With cybercrimes on the rise, it is essential to make your online security measures more robust. Hence, to protect your account and the history, you need to learn how to set up 2fa login on your accounts for an additional safety cover. It not only protects your online social accounts but other accounts as well.

\n

FAQs

\n

1. How do I enable 2FA login?

\n

2FA login can be enabled once you have a reliable identity management solution. In the system dashboard, under authentication, you can find 2FA and enable the same.

\n

2. How do I activate my 2FA code?

\n

Choose your method (SMS or authenticator app) during setup, then link the code to your account.

\n

3. What is 2FA and how do you set it up?

\n

2FA adds a second verification step (like a code from an app). Set it up by downloading an authenticator app, scanning a QR code, and entering the code generated.

\n

4. Is 2FA easy to use?

\n

Yes, 2FA is user-friendly. It involves entering a code or approving a notification on your phone during logins.

\n

\n \n \n

\n","frontmatter":{"date":"January 12, 2021","updated_date":null,"description":"2FA is one of the best security methods that use two layers to verify a consumer’s identity. This means, rather than simply entering the password to log into an account, two-factor authentication requires a code to be sent via text message to a consumer's phone number or generated through an app","title":"How to Set Up Two-factor Authentication on All Your Online Accounts?","tags":["2fa","mfa","cx"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.408450704225352,"src":"/static/77348c75b6cf25e28b8f7f2daf5442b2/9a31d/how-to-setup-2fa-online-accounts.jpg","srcSet":"/static/77348c75b6cf25e28b8f7f2daf5442b2/f836f/how-to-setup-2fa-online-accounts.jpg 200w,\n/static/77348c75b6cf25e28b8f7f2daf5442b2/2244e/how-to-setup-2fa-online-accounts.jpg 400w,\n/static/77348c75b6cf25e28b8f7f2daf5442b2/9a31d/how-to-setup-2fa-online-accounts.jpg 767w","sizes":"(max-width: 767px) 100vw, 767px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.jpg"}}}},{"node":{"excerpt":"Fundamentally, digital transformation is the accumulation of modern tools and processes to solve market challenges and provides…","fields":{"slug":"/identity/what-is-digital-transformation/"},"html":"

Fundamentally, digital transformation is the accumulation of modern tools and processes to solve market challenges and provides possibilities for upbeat consumer intimacy.

\n

When it comes to businesses, every era brings its own buzzword.

\n

For example, for the '90s, it was the internet. Towards the beginning of this century, it was social media. And now, it's digital transformation.

\n

Companies need to gear up and leverage technologies to satisfy their employees and consumers today.

\n

We can further gauge the importance of organizations having to invest in new-age transformation, when former Executive Chairman of Cisco System, John Chambers stated, \"At least 40% of all businesses will die by 2025, if they don't figure out how to change their entire company to accommodate new technologies.\"

\n

But despite such affirmatives, digital transformation has a long way to go. In this blog, we have summarized its importance for organizations, what has changed during the pandemic, and what to look forward to in 2021.

\n

Let's start with the definition.

\n

What is Digital Transformation

\n

Digital transformation is the process of leveraging digital technology to develop new business processes and consumer experiences to meet the changing market dynamics or to alter the existing ones.

\n

Beyond that, it is also an aggregation of cultural change that expects companies to experiment often and not get demotivated when new practices and not accepted in public.

\n

However, note that every company reimagines transformation differently. It isn't easy to define a concept that applies to all.

\n

You can start by outlining your organization's problem statement, opportunities, and goals. In most cases, that revolves around:

\n\n

Digital transformation is interconnected. One innovation leads to another. So when process improvements happen, it leads to better product and service gains. When consumers grow accustomed to those changes, they demand more, and the cycle continues.

\n

All-in-all, you need to understand what digital transformation really means for your organization and what you should do to articulate it.

\n

Why is Digital Transformation Crucial for Enterprises

\n

Organizations may idealize digital transformation for many reasons. But the most likely explanation has to be survival.

\n

Think of it this way. The more simplicity you bring for consumers, the more likely are your chances of survival.

\n

The Annual Manufacturing Report 2020 showcases that senior manufacturing executives are clearly prioritizing digital transformation. The finding shows:

\n\n

The world of business is changing. Organizations are willing to experiment, adopt, and adapt to new technologies.

\n

So, where do you stand? Are you still going traditional?

\n

Are you developers migrating to the cloud environment? Are you already making technological decisions? Or are you still waiting for a wake-up call?

\n

Wherever you are... START!

\n

Has Digital Transformation Changed With the COVID-19 Pandemic

\n

\n \n

However, in these trying times, it is also crucial that countries invest in digital products and services that aid in national security and the economy at large. We should anticipate strengthened regulatory structures and increased scrutiny on activities related to merger and acquisition (M&A).

\n

\n \n \n

\n

Futuristic workspaces will rule.

\n

The COVID-19 pandemic seems to have hit the reset button on how people work. We are witnessing a changing approach of people towards jobs, mobility, and versatile work models.

\n

Nonetheless, we expect to see new work delivery models, along with a major transformation in employment constructs. Most of these latest models will be driven by digital realization platforms.

\n

Tech debts will be channelized.

\n

Technology debts is a common liability witnessed in large enterprises. This happens because businesses go through multiple cycles of tech acquisitions and implementations over time.

\n

The ongoing crisis may provide leaders with an opportunity to carefully assess their tech environment and recognize opportunities where such debts can be withdrawn. So, companies can leverage the cash flow for future digital investments when debts are taken care of.

\n

Digital skills will take the lead.

\n

Technologies will drive digital transformation, and they will also power a competitive edge for businesses. Only those with a triad of skills, viz. digital, professional, domain, and functional skills, will rule the future.

\n

For companies, this is an ideal time to focus on a digital talent pool and use the opportunity to create a universal foundation of digital skills.

\n

Digital labour will witness a paradigm shift.

\n

The world was already onboarding digital labor and bots. But when COVID-19 happened, this shift towards automation further intensified.

\n

Now, companies will want to exploit digital channels that can stay unaffected in the event of a crisis and minimize dependency on workers.

\n

Moving on.

\n

Digital transformation will be a powerful lever in the response of companies to the current crisis. Therefore, it is expected of companies to formulate plans that will give them the ability to adapt their business models in accordance with the rapidly evolving business environment.

\n\n

What Drives Digital Transformation

\n

\n \n

But is it really so?

\n

Turns out, no, it isn't.

\n

According to PwC's CFO Pulse survey, nearly 50% of the organizations list consumer engagement and loyalty as their leading influencers when it comes to adopting digital transformation strategies in their company.

\n

This means companies that are undergoing digital transformation are also creating highly engaged consumers. According to Rosetta Consulting Study, these consumers are:

\n\n

There is one thing clear—_consumers _are running the show today.

\n

Businesses need to understand who these new kinds of digital customers are in order to offer better experiences and win big.

\n

You have to rethink new ways of interacting with your consumers. This means:

\n\n

Get Started with Digital Transformation

\n\n

Today's consumers want businesses to regard them as a distinctive individual and consider their personal preferences and purchasing background.

\n

According to Accenture, 75% of consumers admit that they are more likely to purchase from an organization that:

\n\n

Consumers today do mind companies using their data to make their lives easier.

\n

Moreso, as businesses, you should invest in a CRM system. They help you analyze data based on consumer's previous interactions.

\n

For example, you can get a clear understanding of your consumers by analyzing their product requests. This information can then be used to produce highly tailored messages, resulting in a more personalized experience.

\n\n

Speed is more important than ever. Consumers expect responses from companies within seconds. They also anticipate the same response time on weekends as on weekdays—on-demand, 24 hours a day, 7 days per week.

\n\n

Identify why you are shifting and what you plan to accomplish. This is the basic component that will lead the rest of your journey.

\n\n

You must build a vision of how digitalization applies to your processes and where it can make a difference in achieving better consumer experiences.

\n\n

Perform a digital maturity assessment to find how much you have fared in leveraging digital transformation and the areas where you require improvement.

\n\n

\n \n

Explosion of Customer Data Platforms (CDP).

\n

Data is growing exponentially, and it definitely won't stop anytime shortly. Data warehouse, analytics platforms, and visualization software will not lose significance. Still, at the same time, the world is about to witness a rapid adoption of customer data platforms (CDP) in 2021.

\n

So, what are these CDPs? A CDP is a packaged software that collects and organizes data from all available sources, tags it, and makes it accessible for anybody who wants to use it.

\n

Now that business processes have become much more decentralized, courtesy of the new work-from-home models and the ongoing growth of data collection, CDPs will become increasingly important in 2021.

\n

Companies such as Adobe, SAP, Oracle, and Microsoft are already invested heavily to bring new CDPs to the market.

\n

Automation will increase financial proficiency.

\n

As the world is trying to recover from the pandemic, financial institutions are particularly concerned about their shrinking revenue and loan losses. This has encouraged them to lean towards automation and robotics.

\n

While still in its earliest stages, Robotic Process Automation (RPA) can increase productivity by providing a cost-effective substitute to Human Resources.

\n

Other recorded advantages of RPA include improved consumer experiences, flexibility, upgraded precision, and proficiency in work.

\n

Utilization of AI.

\n

When the pandemic hit, AI and data were suddenly liberalized and accelerated to a massive extent. It happened almost overnight that governments and organizations found themselves working together to establish a quicker way to avoid the spread of the virus.

\n

Everyone was turning their heads to AI, machine learning, and data. So, what began as an emergency in 2020 will continue to scale in 2021 and is likely to spread across a wide variety of opportunities. AI will be addressing global and business issues quicker, better, and on a broader scale.

\n

While many may still consider AI to be more of a future trend, it is already here and driving our everyday lives. For example, when you receive recommendations on Netflix or while shopping on Amazon, that's the work of an AI.

\n

Quantum computing will go mainstream.

\n

2020 witnessed a number of achievements from various pioneers in the quantum industry, including IBM, Amazon, Honeywell, and Google.

\n

These companies have been favoring quantum advantage or supremacy by claiming that a quantum computer can calculate hundreds or thousands of times faster than a classical computer. Also, the technology in question is efficient enough to complete calculations that classical supercomputers can not do at all.

\n

Quantum computing was also at the forefront of digital transformation during the pandemic endeavors to stop the spread of infection, as well as the development of therapeutics and future vaccines.

\n

2021 will be no different. Quantum computing will continue to rise and bring more efficiencies to the table

\n

Work From Home will outlast the pandemic.

\n

For quite a while, employees were pushing for greater job flexibility, and organizations opting to allow remote work were only a handful. In 2020, when the pandemic caught most companies off-guard, telecommuting seemed the only rational solution.

\n

Now, even when things are gradually getting back to normal, organizations are still allowing people to work from home—as a possible shield to protect from future outbreaks. Large tech organizations like Google and Facebook have already extended their remote arrangements for parts of 2021.

\n

Now that companies know how remote setups work for them, also how they are more productive despite physical distance, work from home models may continue to exist for a few more years, and maybe beyond.

\n

Cybersecurity will gain momentum.

\n

Between January and April 2020 alone, there was a 630% rise in cyberattacks on cloud accounts and a 238% rise in banks. Cybersecurity was the talk of the town throughout the pandemic.

\n

Because there were fewer employees onsite on the same network, it became crucial for companies to upgrade their cybersecurity strategies and extend them beyond their corporate network.

\n

Despite the attacks, 2021 may witness an accelerated workload migration to the cloud. A Gartner analysis finds \"distributed cloud\" may take over along with some profound security implications.

\n

The Role of Culture in Digital Transformation

\n

\n \n \n

\n

Culture in digital transformation has no mysterious or unseen presence. Digital is about embedding culture into business operations to succeed, and not just update technology, redesign products, and improve client relationships.

\n

So, if you fail to align your business initiatives with employee values and expectations, you end up generating additional risks to your company's culture. The consequences include slow adoption of digital technologies, lost productivity, loss of market competitiveness, and an ultimate decrease in ROI.

\n

And that's not how digital transformation functions. You need a more systematic and collaborative attitude towards cultural change instead.

\n

For organizations trying to shape their digital aspirations, what's lacking is transparent and realistic guidance on shaping their culture for the road ahead.

\n

Our best tip for any organization will be to invest in a sustained effort that allows teams to cultivate a more profound passion and empathy for their business.

\n

How Do You Measure ROI on Digital Transformation

\n

The ability to define and calculate the return on investment (ROI) of digital transformation can be very difficult for transformation leaders.

\n

After all, it is not possible to measure consumer experiences. Instead, you need to assess your business as a whole and consider the changes in your processes and workflows.

\n

How do you start? Simple. By creating a strong investment case. The following steps below will help you build a practical ROI model for your business.

\n

Step 1: Narrow down your objectives for digital transformation: Do you want to digitize your data? Integrate touchpoints? Increase productivity in operations? Or repeat purchases?

\n

It can be one or a combination of many objectives. Jot down your roadmap to understand what KPIs you should measure.

\n

Step 2: Define your cost centers: List out all your business areas where you have incorporated digital transformation.

\n

For example, it will include not just your IT department (which is an obvious choice for your technology upgrade). You should also consider the additional cost of training your employees to help them understand your new web portal.

\n

Step 3: Allocate a figure to all consumer metrics: Make sure to include all potential impacts on sales from improvements in consumer experience like:

\n\n

Step 4: Set realistic timelines and milestones: When will you calculate the progress of each aspect of your digital transformation? The timeline is essential.

\n

For example, if you are launching a new self-serve application, your inbound call levels are bound to decrease in the first year. But your KPIs will gradually pick up as consumers enjoy the benefits of your product. Therefore, do not set your aspirations too high in the beginning.

\n

Meet the Industry Experts

\n

We have caught a few digital transformation leaders in action as they offer valuable perspective and guidance.

\n\n

Conclusion

\n

Digital transformation is an amalgamation of strategy, roadmap, goals, stakeholders, and all the parameters needed to succeed.

\n

Right now, businesses are rapidly including the creative use of data, be it via analytics, IoT, or machine learning etc. for their transformation activities. Clearly, in many ways, digital-led transitions are evolving and are here to stay.

\n

Only the adapters will survive!

\n

\n \n \n

\n","frontmatter":{"date":"January 11, 2021","updated_date":null,"description":"Digital transformation is the process of leveraging digital technology to develop new business processes and consumer experiences to meet the changing market dynamics or to alter the existing ones. So, has the dynamics changed with the COVID-19 pandemic? You are about to find out.","title":"What is Digital Transformation","tags":["digital transformation","cybersecurity","cx"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.408450704225352,"src":"/static/1bde7f901817a3bbf2229ed97ea8977c/9a31d/what-is-digital-transformation.jpg","srcSet":"/static/1bde7f901817a3bbf2229ed97ea8977c/f836f/what-is-digital-transformation.jpg 200w,\n/static/1bde7f901817a3bbf2229ed97ea8977c/2244e/what-is-digital-transformation.jpg 400w,\n/static/1bde7f901817a3bbf2229ed97ea8977c/9a31d/what-is-digital-transformation.jpg 767w","sizes":"(max-width: 767px) 100vw, 767px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.jpg"}}}},{"node":{"excerpt":"No conversation on digital security is complete without a well-rounded discussion on how to choose a strong password. Passwords are the…","fields":{"slug":"/identity/how-to-choose-a-secure-password/"},"html":"

No conversation on digital security is complete without a well-rounded discussion on how to choose a strong password.

\n

Passwords are the digital keys to our daily lives. They are the gateway to our professional services, our network of friends, and all our financial applications.

\n

No wonder we want to keep our passwords private and secure!

\n

If someone gains access to your email ID, they can easily opt for the \"forgot your password?\" link on (for example, an online shopping or banking site) you use.

\n

Also, if a cybercriminal successfully hacks into your social media account, they can post fraudulent messages asking for money or sending out links to scammer websites.

\n

So, what's the solution? A good password.

\n

But before finding how to choose a strong password in 2021, let's first look at the most common methods of how passwords are being hacked today.

\n

How Does a Password Get Hacked? Top 5 Threats

\n

Hackers utilize numerous techniques to crack your passwords. One technique is to gain access by guessing the password directly.

\n

They could do it by closely following your social media presence, security questions, and similar details. This is why industry experts do not favor the use of personal details on passwords.

\n

Other tactics that hackers use include:

\n

1. Phishing attacks

\n

Phishing is a social engineering attack that occurs when the hacker dupes a victim into opening an email using fraudulent ads or scareware tactics.

\n

Unfortunately, such attacks are no longer just an email problem. It has somewhat expanded to instant/ text messages, social networks, videoconferencing, and gaming applications.

\n

As phishing threats grew to over 50,000 a day around December 2020, SlashNext Threat Labs reported a 30% increase throughout 2019.

\n

Both organizations and individuals should know how to choose a strong password and take a zero-trust approach beyond domain credibility.

\n

2. Dictionary attack

\n

A dictionary attack is a method of attacking the victim's account by entering every word in a dictionary as a password. They usually run through a list of common words and phrases or easy to guess passwords.

\n

Users frequently reuse their passwords or do not change them even after a breaching attempt. That makes this form of attack easy to execute.

\n

In fact, the 2019 Verizon Data Breach Investigations Report (DBIR) reveals that compromised and reused passwords are involved in 80 percent of hacking-related breaches.

\n

3. Brute force attacks

\n

Similar to a dictionary attack, brute force uses trial-and-error to guess the victim's login credentials, find a hidden web page, or access network resources.

\n

Later, those tainted accounts are used to send phishing emails, sell credentials to third parties, or spread fake content.

\n

Verizon's Data Breach Investigations Report 2020 reveals that around 20% of breaches happening within SMBs involve brute force. The number is approximately 10% for large enterprises.

\n

The trend essentially remained unchanged in 2018 and 2019, but the coronavirus pandemic may have impacted the number last year.

\n

4. Keystroke logging

\n

Keystroke logging or keyboard capturing is the method of tracking and recording the keystrokes of the victim, thereby capturing any information typed during the session.

\n

The hacker uses tools to record the data captured by each keystroke, which are retrieved later on. Moreso, a majority of these tools can record calls, GPS data, copy-cut-paste clipboard, and microphone or camera footage. The recorded data are later used for phishing attacks, stalking, and identity theft.

\n

5. Man-in-the-middle attacks

\n

In this attack, the hacker positions themselves in the middle of a conversation between a user and an application to eavesdrop or impersonate a website or application.

\n

In return, the hacker steals the victim's login credentials, account numbers, social security numbers, etc.

\n

SaaS businesses, e-commerce sites, and users of financial services majorly fall victim to man-in-the-middle attacks.

\n

The Do's and Don't on How to Choose a Strong Password

\n

\n \n \n

\n

What does a secure password look like? It is usually the one that cannot be guessed easily or cracked using software tools.

\n

Not that it should only be unique and complex, here is a collection of the do's and don't on how to choose a strong password to avoid being a victim of the attacks mentioned above.

\n

The Do's

\n

Use two-factor authentication (2FA): 2FA adds an additional layer of security to your existing account. Even if the hacker is able to crack your password, they will still have an extra layer to authenticate.

\n

The following are a few types of layers that businesses choose to provide:

\n\n

Follow standard password rules: There are a few basic rules on how to choose a strong password that you should closely follow.

\n\n

Choose sufficiently random combinations of words: Yes, it is possible to use an easy-to-remember password and make it secure at the same time. The following are a few ways to do that:

\n\n

Pick something that does not make sense: How to choose a strong password? Go for something that has no meaning. For example, it could be:

\n\n

Change your passwords regularly: Also, do not reuse the same password for a long time. The more sensitive your data is, the more frequently you should change your password.

\n

\n \n \n

\n

Always remember to log out of websites and devices once you are done using them.

\n

The Don’ts

\n\n

The 20 Worst Passwords of 2020

\n

According to Nordpass.com, here are the 20 worst passwords of 2020. The list also offers an overview of how many times the password has been breached, among other parameters.

\n

Disclaimer: Stay away from these passwords.

\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n
Position \n Password \n Number of users\n Time to crack it\n Times exposed\n
1\n 123456\n 2,543,285\n Less than a second\n 23,597,311\n
2\n 123456789\n 961,435\n Less than a second\n 7,870,694\n
3\n picture1\n 371,612\n Three hours\n 11,190\n
4\n password\n 360,467\n Less than a second\n 3,759,315\n
5\n 12345678\n 322,187\n Less than a second\n 2,944,615\n
6\n 111111\n 230,507\n Less than a second\n 3,124,368\n
7\n 123123\n 189,327\n Less than a second\n 2,238,694\n
8\n 12345\n 188,268\n Less than a second\n 2,389,787\n
9\n 1234567890\n 171,724\n Less than a second\n 2,264,884\n
10\n senha\n 167,728\n Ten seconds\n 8,213\n
11\n 1234567\n 165,909\n Less than a second\n 2,516,606\n
12\n qwerty\n 156,765\n Less than a second\n 3,946,737\n
13\n abc123\n 151,804\n Less than a second\n 2,877,689\n
14\n Million2\n 143,664\n Three hours\n 162,609\n
15\n 000000\n 122,982\n Less than a second\n 1,959,780\n
16\n 1234\n 112,297\n Less than a second\n 1,296,186\n
17\n iloveyou\n 106,327\n Less than a second\n 1,645,337\n
18\n aaron431\n 90,256\n Three hours\n 30,576\n
19\n password1\n 87,556\n Less than a second\n 2,418,984\n
20\n qqww1122\n 85,476\n Fifty two minutes\n 122,481\n
\n

5 Tips on How to Choose a Strong Password Manager

\n

\n \n \n

\n

A password manager helps you auto-generate strong passwords and stores them in encrypted, centralized locations on your behalf. You can access all your passwords with a master password.

\n

A lot of password managers are free to use and provide optional features such as synchronizing new passwords across several devices. If allowed, they also audit users’ actions to ensure that they are not repeating their passwords in multiple locations.

\n

So, (to be on the right track), how to choose a strong password manager? Well, it should at least have the following core features:

\n\n

Reduce Password Vulnerabilities Using the LoginRadius Password Management Solution

\n

To answer the popular question \"how to choose a strong password in 2021\", LoginRadius offers a range of robust Password Policy features.

\n

The CIAM platform captures the following categories of password management in the LoginRadius Admin Console:

\n\n

Conclusion

\n

By now, you know how to choose a strong password. However, hackers will still try to crack your passwords, no matter how secure you are trying to make them.

\n

Follow the steps listed above to make your passwords as strong and unique as possible. Remember, if your password is too easy to remember, it is probably not secure at all.

\n

\n \n \n

\n","frontmatter":{"date":"January 06, 2021","updated_date":null,"description":"Passwords are the digital keys to our daily lives. They are the gateway to our professional services, and our network of friends. So, what does a secure password look like? Here is a collection of the do's and don't on how to choose a strong password to avoid being a victim of cyberattack.","title":"The Do's and Don'ts of Choosing a Secure Password","tags":["data security","password management","ciam solution","cx"],"pinned":null,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.3986013986013985,"src":"/static/3744865801c829fc49bb5b4c058eb440/9a31d/how-to-choose-a-secure-password-in-2021.jpg","srcSet":"/static/3744865801c829fc49bb5b4c058eb440/f836f/how-to-choose-a-secure-password-in-2021.jpg 200w,\n/static/3744865801c829fc49bb5b4c058eb440/2244e/how-to-choose-a-secure-password-in-2021.jpg 400w,\n/static/3744865801c829fc49bb5b4c058eb440/9a31d/how-to-choose-a-secure-password-in-2021.jpg 767w","sizes":"(max-width: 767px) 100vw, 767px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.jpg"}}}}]},"markdownRemark":{"excerpt":"Identity is evolving, and developers are at the forefront of this transformation. Every day brings a new learning—adapting to new standards…","fields":{"slug":"/identity/developer-first-identity-provider-loginradius/"},"html":"

Identity is evolving, and developers are at the forefront of this transformation. Every day brings a new learning—adapting to new standards and refining approaches to building secure, seamless experiences.

\n

We’re here to support developers on that journey. We know how important simplicity, efficiency, and well-structured documentation are when working with identity and access management solutions. That’s why we’ve redesigned the LoginRadius website—to be faster, more intuitive, and developer-first in every way.

\n

The goal? Having them spend less time searching and more time building.

\n

What’s New and Improved on the LoginRadius Website?

\n

LoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve spent the last few months redesigning our interface— making navigation more intuitive and reassuring that essential resources are easily accessible.

\n

Here’s a closer look at what’s new and why it’s important:

\n

A Developer-Friendly Dark Theme

\n

\"This

\n

Developers spend long hours working in dark-themed IDEs and terminals, so we’ve designed the LoginRadius experience to be developer-friendly and align with that preference.

\n

The new dark mode reduces eye strain, enhances readability, and provides a seamless transition between a coding environment and our platform. Our new design features a clean, modern aesthetic with a consistent color scheme and Barlow typography, ensuring better readability. High-quality graphics and icons are thoughtfully placed to enhance the content without adding visual clutter.

\n

So, whether you’re navigating our API docs or configuring authentication into your system, our improved interface will make those extended development hours more comfortable and efficient.

\n

Clear Categorization for LoginRadius Capabilities

\n

\"This

\n

We’ve restructured our website to provide a straightforward breakdown of our customer identity and access management platform capabilities, helping you quickly find what you need:

\n\n

This structured layout ensures you can quickly understand each capability and how it integrates into your identity ecosystem.

\n

Developer-First Navigation

\n

\"This

\n

We’ve been analyzing developer workflows to identify how you access key resources. That’s why we redesigned our navigation with one goal in mind: to reduce clicks and make essential resources readily available.

\n

The new LoginRadius structure puts APIs, SDKs, and integration guides right at the menu bar under the Developers dropdown so you can get started faster. Our Products, Solutions, and Customer Services are also clearly categorized, helping development teams quickly find the right tools and make informed decisions.

\n

Quick Understanding of Integration Benefits

\n

\"This

\n

Developers now have a clear view of the tech stack available with LoginRadius, designed to support diverse business needs.

\n

Our platform offers pre-built SDKs for Node.js, Python, Java, and more, making CIAM integration seamless across popular programming languages and frameworks.

\n

Over to You Now!

\n

Check out our revamped LoginRadius website and see how the improved experience makes it easier to build, scale, and secure your applications.

\n

Do not forget to explore the improved navigation and API documentation, and get started with our free trial today. We’re excited to see what you’ll build with LoginRadius!

\n","frontmatter":{"date":"February 21, 2025","updated_date":null,"description":"LoginRadius’ vision is to give developers a product that simplifies identity management so they can focus on building, deploying, and scaling their applications. To enhance this experience, we’ve redesigned our website interface, making navigation more intuitive and reassuring that essential resources are easily accessible.","title":"Revamped & Ready: Introducing the New Developer-First LoginRadius Website","tags":["Developer tools","API","Identity Management","User Authentication"],"pinned":true,"coverImage":{"childImageSharp":{"fluid":{"aspectRatio":1.7857142857142858,"src":"/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp","srcSet":"/static/80b4e4fbe176a10a327d273504607f32/61e93/hero-section.webp 200w,\n/static/80b4e4fbe176a10a327d273504607f32/1f5c5/hero-section.webp 400w,\n/static/80b4e4fbe176a10a327d273504607f32/58556/hero-section.webp 800w,\n/static/80b4e4fbe176a10a327d273504607f32/99238/hero-section.webp 1200w,\n/static/80b4e4fbe176a10a327d273504607f32/7c22d/hero-section.webp 1600w,\n/static/80b4e4fbe176a10a327d273504607f32/1258b/hero-section.webp 2732w","sizes":"(max-width: 800px) 100vw, 800px"}}},"author":{"id":"Rakesh Soni","github":"oyesoni","avatar":"rakesh-soni.jpg"}}}},"pageContext":{"limit":6,"skip":618,"currentPage":104,"type":"///","numPages":161,"pinned":"ee8a4479-3471-53b1-bf62-d0d8dc3faaeb"}},"staticQueryHashes":["1171199041","1384082988","2100481360","23180105","528864852"]}