Blog

Notes from the build log

Practical write-ups on building and shipping web products: Next.js, backend engineering, databases, performance and SEO.

Get new articles by email

Or follow the RSS feed.

Oct 27, 2026 · 4 min read

How I Secured My Next.js Admin Panel: Argon2, Email Codes and Revocable Sessions

A walkthrough of the login behind my portfolio's admin panel: argon2id with a pepper, lockouts, email codes, and JWT sessions you can revoke, in Next.js 16.

#nextjs #authentication #mongodb