Security

Atharva Deosthale

Use Premium Geo DB network attributes in Appwrite Firewall to stop bots that rotate IP addresses on rented servers, with rules for your API, Functions, and Sites.

Aditya Oberai

Premium Geo DB adds city, time zone, ISP, ASN, and connection type to IP geolocation on Appwrite Cloud, for Firewall rules, usage, and the Locale API.

Torsten Dittmann

A critical XSS in TanStack Start server functions lets a crafted link run scripts on your domain. Here's how to upgrade, and what Appwrite Sites blocks for you.

Aditya Oberai

Appwrite Auth now checks passwords against Have I Been Pwned, so you can flag, reject, or block sign-in with passwords exposed in known data breaches.

Atharva Deosthale

Practical Appwrite Firewall rules for OTP abuse, database scraping, per-user quotas, regional access, trusted networks, webhook Functions, and Sites under attack.

Atharva Deosthale

Appwrite Firewall rate limit rules support three strategies. Learn how fixed window, sliding window, and token bucket work, where each one breaks down, and how to pick the right one for your traffic.

Eldad Fux

Learn what CIDR is, how CIDR notation like 10.0.0.0/8 works, how to read prefix lengths and calculate ranges, and how to use CIDR blocks in real firewall rules.

Atharva Deosthale

A detailed breakdown of the May 2026 Mini Shai-Hulud attack on TanStack npm packages, how GitHub Actions cache poisoning and OIDC trusted publishing were abused, what the malware tried to steal, and how developers should respond.

Aditya Oberai

A look at what recent security incidents teach us about modern app development, and how Appwrite's built-in security features help protect the apps you build and the users who rely on them.

Eldad Fux

Appwrite's production repositories, SDKs, and tooling chain were not impacted by the compromised Axios npm releases.

Aditya Oberai

Explore the essentials of user authentication with tips, best practices and common pitfalls to secure your app and improve user experience.

Aditya Oberai

In this blog, we’ll explore the most popular methods for backup encryption and why encrypting is important.

Aditya Oberai

All you need to know about GDPR compliance for startups, the do's, don'ts and best practices.

Jake Barnby

Appwrite complies with the standards of the California Consumer Privacy Act.

Jake Barnby

Learn more about the difference between CCPA and GDPR and what you need to keep in mind when building your applications.

Aditya Oberai

Learn how to ensure your mobile app protects user privacy while meeting GDPR.

Jake Barnby

Learn more about what this means and the steps we undertake to keep your data safe.

May Ender

This is another step towards building a platform for developers from all industries.

Vincent Ge

Being HIPAA compliant is important for any developer no matter their industry. Learn why you should care and how you can take first steps in becoming HIPAA compliant.

Aditya Oberai

Understanding what passwordless authentication is and how it is a game-changer for both user experience and security.

Aditya Oberai

Let's discuss the pros and cons of social media authentication and the delicate balance of convenience and privacy surrounding it.

Aditya Oberai

How OAuth and OpenID Connect work and why they are beneficial for application security.

Aditya Oberai

Understand the importance and process of integrating 2FA into your applications, enhancing security, and protecting user data effectively.

May Ender

At Appwrite, we take your data seriously. Therefore, we are excited to announce that Appwrite is now GDPR Compliant.

Aditya Oberai

Learn about password hashing algorithms and how they help secure user credentials in your application.

Aditya Oberai

Why it is necessary to implement strong password protection policies in your app and best practices to follow.