Itqualityassurance
- Is it safe to use Remember Me?
- What is the best way to implement Remember Me for a website?
- Should I use remember this device?
- How does the Remember Me option work?
Is it safe to use Remember Me?
The “remember me” option is safe to use on computers and devices that you can trust to protect your browser. It doesn't defeat the purpose of 2FA because the convenience it provides is limited to each computer and browser that you choose to use it on.
What is the best way to implement Remember Me for a website?
A more secure way to implement the remember me feature is to store a random token instead of a user id in both cookies and database server. When users access the web application, you match the cookies' tokens with those stored in the database. Also, you can check the token's expiration time.
Should I use remember this device?
If the website holds personal information about the user, choosing to “remember me on this computer” is probably a bad idea. People should also never click this box if they are using a public computer, like in a library or Internet cafe.
How does the Remember Me option work?
When you check the "Remember Me" checkbox at the Portal Login page, your login will be remembered for some days, even after you close your browser. The next time you open the same browser within that time period, you will be automatically logged in.
