Come back to your account

Steps

1. Start the lab, then sign out from your profile.

   What the server checks: A successful sign-out from your account after you started.

   Signing out deletes the session on the server, so the cookie left in your browser no longer proves anything.

2. Sign in again with your email address and password.

   What the server checks: A successful password sign-in to your account after that sign-out.

   The password is the evidence. The server compares it with a stored hash and never keeps the password itself.

3. Come back to this page and check your progress.

   What the server checks: The session you check with was created by that sign-in.

   A new session starts a new link between this browser and your account. The old one cannot be brought back.

Do it

The server checks your own account records and sign-in history, and shows only whether each step is done. It never shows the events themselves.

Sign in to complete this lab and check your progress. Log in or create an account.

Learn the theory

• Proving control of an accountReturning to an account
• Proving control of an accountWhat authentication establishes
• Passwords and PINsChecking a password
• Staying signed inEnding a session