Account Security
KnowStack provides multiple layers of account security to protect your workspace.
Authentication
- Email and password authentication with secure password hashing
- Email verification required for new accounts
- Session-based authentication with HttpOnly cookies
- Automatic session expiry after inactivity
- CSRF (Cross-Site Request Forgery) protection on all state-changing requests
Multi-Factor Authentication (MFA)
Admin accounts use multi-factor authentication for additional security. When an admin logs in, they must verify their identity with a code before gaining access to administrative features.
Content Security
- Content Security Policy (CSP) headers prevent cross-site scripting (XSS) attacks
- All user input is sanitized before storage and display
- File uploads are validated for type and size before processing