📄️ Best practices
CAPTCHAs are services that protect your website from spam and disruptive behaviour. They generally use risk analysis techniques in the background to tell humans and bots apart. FOSSBilling supports Google reCAPTCHA out of the box. However, you can find other CAPTCHA providers like hCaptcha in the extension store.
📄️ Multi-factor Authentication
Multi-factor Authentication adds an extra layer of security. It can connect with Google Authenticator or other apps. It is an additional security measure you need to complete after entering your password.
📄️ Reporting a vulnerability
If you discover a security vulnerability in FOSSBilling, please do not disclose it publicly. Instead see below and follow our security policy so we can take care of it without exposing more users to danger.