Security

View result counter	Name	Description	Community Tags	Auto Tags (AI generated)	Open Issues
1	Xsendfile	Nginx Fast Private File Transfer for Backdrop using X-Accel-Redirect.		Files Performance Security Infrastructure	0
2	password_haveibeenpwned	Placeholder: module ported and renamed as pwned_passwords		Security Authentication User Management	0
3	Password Policy	The Password Policy module allows administrators to define and enforce password policies for user passwords.		Authentication Security User Management Administration	0
4	Password Requirements	Define password requirements that all new passwords must meet on your Backdrop CMS website		Authentication Security User Management	0
5	Acuity WordPress Auth Handler	Detects legacy WordPress password hashes on login and upgrades them to Backdrop hashes.		Authentication Data Migration Security	0
6	Pantheon Secrets	Integration for Key module with Pantheon secrets		Third Party Integrations Security Infrastructure	0
7	Email Username Prevention	Prevents email addresses from being used as usernames.		Access Control User Management Security	0
8	Email verify	Checks that a provided email addresses truly exists.		Authentication Email Security	0
9	CAS Server	The CAS Server module lets Backdrop act as a central authentication system.		Authentication Security Third Party Integrations	0
10	Cookiebot			Third Party Integrations Security Blocks	0
11	IP Deny By Country	IP Deny By Country: Backdrop CMS module		Access Control Security Logging	0
12	Read Only Mode	Lock your Backdrop CMS site config and content so maintenance and deployments can happen without taking the site offline.		Administration Access Control Security	0
13	path2ban	Allows you to block web scanner attacks to certain paths from individual IP addresses.		Security Access Control Logging Email	0
14	bad_ip	This module verifies the users accessing a site using the IP Intelligence service and does not allow them to create an account if the service reports the IP to be a proxy, a VPN, or a bad IP.		Security Authentication Access Control Administration	0
15	hashcash	Uses the Hashcash proof-of-work system to avoid some forms are submitted too quickly.		Spam Control Security Forms	0
16	BackdropAuth for SimpleSAMLphp	Turns Backdrop site into SAML IdP ( Identity Provider)		Authentication Third Party Integrations Security	0
17	Encrypt	This module is an API that other modules can use to encrypt data.		API Security Developer Tools	0
18	SSH public keys	Manages OpenSSH public keys for Backdrop site accounts.	Developer Tools Administration Access	Authentication User Management Security Access Control	0
19	Security.txt	Provides a security.txt file for your site.		Security Administration	0
20	Login allowlist	Limit login access to your site to only certain users.	Security user accounts	Authentication Security Access Control Logging	0
21	AbuseIPDB report	AbuseIPDB report module for Backdrop CMS	Security Spam control	Security API Administration Third Party Integrations	0
22	IP Anonymize	Backdrop port of IP Anonymize for Drupal		Security Privacy Administration	0
23	SpamSpan	Obfuscates email addresses to help prevent spambots from collecting them.		Spam Control Security Filters	0
24	Mail Disguise	Backdrop CMS module to obfuscate email addresses in content		Spam Control Security Filters	0
25	Protected Forms	Protected Forms is a light-weight, non-intrusive spam protection module that enables rejection of all non-admin form submissions which contain undesired language scripts or preset patterns.		Spam Control Forms Security Access Control	0
26	Captcha Riddler	Backdrop CMS spam prevention module		Spam Control Forms Security Multilingual	0
27	Login History	Show user and admins information about their last login and link to their per-user login report if they have access to it.		Logging User Management Administration Security	0
28	HTTP Strict Transport Security	Enable Strict Transport Security on your Backdrop site.		Security Administration Infrastructure	0
29	BLIZZ Vanisher	Use tarteaucitron scripts to control cookies. Please use gdpr_cookies instead.		Security Third Party Integrations Administration	0
30	Production check	Check a site to see if it's properly setup for production use.		Administration Monitoring Security Performance Third Party Integrations	0
31	Register Country	Enables limiting registration to specific countries.		Access Control Authentication Security Third Party Integrations	0
32	Bot repellent	Add the X-Robots-Tag HTTP header to Backdrop for global bot crawling rules.	Security Access Infrastructure	SEO Security Administration	0
33	Ejector seat	Log out (eject) a user whose session has ended in Backdrop.		Authentication Security Access Control	0
34	Session expire	Deletes user sessions from Backdrop which have been idle longer than a configured time.		Administration Performance Security	0
35	Login whitelist	Restrict login to the site for whitelisted users only.		Authentication Access Control Security	0
36	Disable login errors	Hide all the (helpful) error messages for failed logins in Backdrop.		Security Authentication Access Control	0
37	login_security	Thwart attempts to brute-force logins in Backdrop.		Security Authentication Access Control	0
38	Spam Bot Blocker	A "strong" CAPTCHA that is easy to use for site visitors and site admins.	Spam control	Spam Control Forms Security	0
39	Remove generator	Removes the Generator META tag from Backdrop.		Security	0
40	Clear password field	Disable autocomplete for password fields on Backdrop login forms.	Login Security	Security Forms Authentication	0
41	X-Originating-IP	Add the X-Originating-IP header to all outgoing Backdrop emails to assist with investigation of the sources for spam and unsolicited bulk email.		Email Security Spam Control	0
42	Hide PHP fatal error	Redirect PHP fatal errors in Backdrop to a nice error page.		Security Error Handling Logging	0
43	Paranoia	Disable the use of risky permissions and editing of the UID 1 user for Backdrop CMS.		Access Control Permissions Security	0
44	Previous login	Display a timestamp of the previous login after users authenticate to Backdrop.	Authentication Security user accounts	Authentication Security User Management	0
45	User cancel password confirm	Allows users to cancel their accounts with password confirmation rather than e-mail confirmation.		Authentication User Management Security	0
46	HTTP Response Headers			Administration Security Performance	0
47	Protected Pages	Password protect any individual page		Access Control Authentication Administration Security	0
48	Rename Admin Paths	Small security helper module to override admin and user paths		Security Administration Access Control	0
49	CAFile Fetcher	Gets an up-to-date certificate authority bundle to verify certs in tls connections		Infrastructure Security Administration	0
50	Force Password Change	This module allows administrators to force users, by role, individual user, or newly created user, to change their password on their next page load or login, and/or expire their passwords after a period of time.		Authentication User Management Security Administration	1

Pages