How should I secure my Django admin login page?

• django-honeypot

  1 354 7.1 Python

  🍯 Generic honeypot utilities for use in django projects.

Building on the /admin idea - you can create a honeypot solution. I.e. leave a fake login form at /admin (when your real one is at /myxyzlogin) on the basis that any legit user will use the real one so you can entrap anybody using the default. https://github.com/jamesturk/django-honeypot

• django-two-factor-auth

  4 1,584 7.7 Python

  Complete Two-Factor Authentication for Django providing the easiest integration into most Django projects.

  

I also use this on one of my sites https://github.com/Bouke/django-two-factor-auth . Has worked pretty well. Just be careful when configuring it in settings.py (particularly the redirect URLs) and when customizing the templates.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• django-recaptcha

  6 965 7.8 Python

  Django reCAPTCHA form field/widget integration app.

  

I also experimented with this https://github.com/praekelt/django-recaptcha and it seemed decent too. But, getting it to work in tandem with the 2fa package was a bit of a pain and I gave up because I thought that a Captcha to prove a human didn't add much security beyond what 2fa already did.

Suggest a related project