Does any one know what is the use of Magento_Security module introduced in the Magento 2.4?



Security management module Main features:

  1. Added support for simultaneous admin user logins with ability to enable/disable the feature, review and disconnect the list of currently logged in sessions

  2. Added password complexity configuration

  3. Enhanced security to prevent account takeover for sessions opened on public computers and similar:

  • Password confirmation for all critical flows (like password, email change)
  • Lockout of the account after a configurable amount of incorrect login/password entries
  • Password Change functionality is enhanced by email and/or IP address by frequency, number and requests per hour limitation
  • Change password link becomes invalid after the first use or after a configurable amount of time
  • Password/email change notifications are sent to both old and new email addresses
  1. Fixed: the password is not being reset until the new password is submitted via the form available by a one time link sent to the email address

You can find it in the file vendor/magento/module-security/README.md or in the Magento 2.4 DevDocs Magento_Security

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.