Cloudflare Turnstile delivers frustration-free, CAPTCHA-free web experiences to website visitors. In this episode, we'll look at implementing this a few different ways and resolving some issues with Turbo.

We have a look at integrating the HaveIBeenPwned service with Devise so that our users will some awareness of their password being potentially compromised.

Sorcery is a stripped-down, bare-bones authentication library, with which you can write your own authentication flow. In this episode we look at creating the controllers and views for a simple authentication solution.

Continuing from Episode 300, we look at creating a password reset feature. We explore some of the security concerns around this feature and some mitigating options.

Using a hardware security key for multi-factor authentication is a great way to protect user accounts. In this episode, we look at implementing security keys into our Ruby on Rails applications with Devise user accounts.