Questions tagged [remember-me]

A way to store personal information to make it easier for a user to fill in forms or login to websites at a later time.

A "remember me" option is often used on login forms on websites. It is represented as a checkbox labeled "remember me" and stores either the username or a login token to re-login the user when visiting the website again.

525 questions
548
votes
4 answers

What is the best way to implement "remember me" for a website?

I want my website to have a checkbox that users can click so that they will not have to log in each time they visit my website. I know I will need to store a cookie on their computer to implement this, but what should be contained in that cookie? …
Eddie Deyo
  • 5,200
  • 8
  • 35
  • 35
304
votes
12 answers

"Keep Me Logged In" - the best approach

My web application uses sessions to store information about the user once they've logged in, and to maintain that information as they travel from page to page within the app. In this specific application, I'm storing the user_id, first_name and…
Matthew
  • 7,605
  • 7
  • 39
  • 39
71
votes
10 answers

Is it secure to store passwords in cookies?

My web application's home page has a RememberMe checkbox. If the user checks it, I willl store email-id and password in cookies. This is my code: if (this.ChkRememberme != null && this.ChkRememberme.Checked == true) { HttpCookie cookie = new…
ACP
  • 34,682
  • 100
  • 231
  • 371
57
votes
13 answers

What encryption algorithm is best for encrypting cookies?

Since this question is rather popular, I thought it useful to give it an update. Let me emphasise the correct answer as given by AviD to this question: You should not store any data that needs encrypting in your cookie. Instead, store a good sized…
Jacco
  • 23,534
  • 17
  • 88
  • 105
48
votes
1 answer

PHP login system: Remember Me (persistent cookie)

I'd like to add a "remember me" checkbox option before logging in. What is the best way to securely store a cookie in the user's browser? For example, Facebook have their "remember me" checkbox so that every time you enter facebook.com you are…
Karem
  • 17,615
  • 72
  • 178
  • 278
48
votes
5 answers

"Remember Me On This Computer" - How Should It Work?

Looking at Gmail's cookies it's easy to see what's stored in the "remember me" cookie. The username/one-time-access-token. It could be implemented differently in cases where the username is secret, as well. But whatever... the thing is not very high…
Dan Rosenstark
  • 68,471
  • 58
  • 283
  • 421
45
votes
2 answers

Django "Remember Me" with built-in login view and authentication form

How can I reuse the original admin login() and AuthenticationForm to set longer cookie length for users with "remember me" option checked at login page? I am currently using the built-in login through…
Sawwy
  • 569
  • 2
  • 7
  • 15
39
votes
3 answers

What is meaning of "Remember Me" functionality on login page?

I want to include "Remember Me" functionality on login page but I don't know its actual meaning (how its work). I have seen different uses at many websites but I didn't get its actual meaning.
27
votes
1 answer

Implementing "Remember Me" Feature in ASP.NET MVC

I'm trying to implement a "remember me" feature to my login form. I am using ASP.NET MVC as my web application. I managed to get the cookie stuff working, but I failed to automatically login the user in case he/she checked the remember me checkbox…
Kassem
  • 8,116
  • 17
  • 75
  • 116
20
votes
1 answer

How remember me feature works?

Definition of "Remember Me" feature is When you check the "Remember Me" checkbox at the Portal Login page, your login will be remembered for some days, even after you close your browser. The next time you open the same browser within that…
emilly
  • 10,060
  • 33
  • 97
  • 172
18
votes
2 answers

How to use Devise: rememberable?

I'm making a Rails App. I'd like to implement a check box 'remember me' for users to skip enter password from next time with using Devise:rememberable.but I can't figure out how to implement. if you have any idea with this , please show me some…
Tai
  • 181
  • 1
  • 1
  • 4
17
votes
2 answers

Log user in with remember-me functionality in Spring 3.1

I currently log users in programmatically (like when they login through Facebook or other means than using my login form) with: SecurityContextHolder.getContext().setAuthentication( new UsernamePasswordAuthenticationToken(user, "",…
at.
  • 50,922
  • 104
  • 292
  • 461
17
votes
1 answer

How to securely keep my users signed in with refresh tokens?

From https://stackoverflow.com/a/7209263/1225328: The idea of refresh tokens is that if an access token is compromised, because it is short-lived, the attacker has a limited window in which to abuse it. I get it, but if the attacker accesses…
sp00m
  • 47,968
  • 31
  • 142
  • 252
16
votes
4 answers

Proper way to use "Remember me" functionality in PHP

Short Working on login system and trying to implement remember me feature. Recently, l did research about this subject, read bunch of articles, posts, stories, novels, fairy tales (calling them so, because some of them doesn't contain even 1 line of…
Tural Ali
  • 22,202
  • 18
  • 80
  • 129
15
votes
1 answer

Remember-me not working .. throws java.lang.IllegalStateException: UserDetailsService is required

Following the guidlines of below tutorial I implemented remember-me functionality http://www.baeldung.com/spring-security-remember-me But when I run the program it throws java.lang.IllegalStateException: UserDetailsService is required. whereas…
Vikash
  • 2,046
  • 3
  • 23
  • 30
1
2 3
34 35