Adaptive skill practice — find your level, get sharper.

Keentune

›

Computer Science

›

Security

Security practice

Password storage

Try one — no signup

How should a web app store its users’ passwords?

Start practicing — it’s free

No signup · first signal after 5 answers · your score at session end

Think like an attacker and a defender

Application and software security in depth — the OWASP Top 10 and injection/access-control flaws, threat modeling (STRIDE, trust boundaries), authentication vs authorization and the protocols (MFA, sessions, JWT, OAuth2/OIDC, SAML), cryptography fundamentals (hashing vs encryption, symmetric vs asymmetric, signatures, HMAC, KDFs, TLS/PKI), secrets management, and supply-chain security. Goes deeper than the web-fundamentals security slice. Part of the Developer track.

• Meets you at your level — never too easy, never too hard.

• Adapts every question to how you’re doing.

• Tracks your level over time. Skill practice, not a test.

New here? Read the Security guide

A free 18-minute primer — the mental model, the mistakes beginners make, and what to practice first.

Curriculum

231 concepts across 26 chapters, from foundations through advanced practice — each one a concept the adaptive question bank can teach and test.

A. Security principles and the trust model

B. Threat modeling and risk

C. Vulnerability taxonomy and the OWASP Top 10

D. API security

E. Access control and authorization

F. Injection

G. Cross-site scripting and output encoding

H. The browser security model, CORS and response headers

I. CSRF, SSRF and the confused deputy

J. Authentication, sessions and cookies

K. Password and credential storage

L. Tokens: OAuth 2.0, OIDC and JWT

M. Cryptography fundamentals

N. Key management and cryptographic misuse

O. PKI and TLS

P. Network and infrastructure security

Q. Cloud, container and Kubernetes security

R. Software supply chain

S. Secure SDLC and security testing

T. Attack lifecycle, detection and incident response

U. Secrets, logging and data protection

V. Email and domain security

W. Memory safety and the low-level weakness class

X. Privacy, compliance and governance

Y. File upload and handling

Z. Automated abuse of valid functionality

View the full curriculum →

Keentune is not affiliated with or endorsed by the organizations whose documentation informs these maps.

Start practicing — it’s free

No signup · first signal after 5 answers · your score at session end

Explore all skills on Keentune

Security on exams

Security is one of the skills tested on these exams. Each prep page lays out what the real test covers and where this skill fits.

AWS Solutions Architect

More skills to practice

Engineering Leadership

Also on your phone

App Store Google Play

All exam, test, and product names and trademarks are the property of their respective owners and are used here for identification and reference only. Keentune is independent study practice — not affiliated with, authorized, or endorsed by any of these organizations.