Thanks for sharing. This is handy - I’m new to Elixir/Phoenix and was a little bewildered by the choice of auth libraries. For now I’ve just been using phx.gen.auth but would like to add social auth at some point so will be referring to this.

This guide uses :rand.bytes/1 to generate a password.

not cryptographically strong

The auto-generated code they are discussing uses :crypto.strong_random_bytes, just like the erlang docs recommend.

It is easily changed, but this is meant to be an auth guide.

@slouchpie thanks for a peer review! Indeed a grave mistake on my part. Now updated.

A swift and honourable response. You have my respect.

this is such a good blog post. Thanks!

Thanks , very helpful blog. I think we need something for 2FA “Two factor authentication”.
It is becoming increasingly a security requirement for sensitive/super users access to applications.

There is a lot of work done for this already.

Check this discussion:

https://forum.elixirforum.com/t/i-added-2fa-to-the-phx-gen-auth-generator/63914/2

and this PR:

https://github.com/phoenixframework/phoenix/pull/5859

Not adding much, but I still just want to say great blog, I enjoyed it and found it helpful.