Account Security

KnowStack provides multiple layers of account security to protect your workspace.

Authentication

  • Email and password authentication with secure password hashing
  • Email verification required for new accounts
  • Session-based authentication with HttpOnly cookies
  • Automatic session expiry after inactivity
  • CSRF (Cross-Site Request Forgery) protection on all state-changing requests

Multi-Factor Authentication (MFA)

Admin accounts use multi-factor authentication for additional security. When an admin logs in, they must verify their identity with a code before gaining access to administrative features.

Content Security

  • Content Security Policy (CSP) headers prevent cross-site scripting (XSS) attacks
  • All user input is sanitized before storage and display
  • File uploads are validated for type and size before processing