Dev tools · alternatives · 2026
24 alternatives to Device-Bound Session Tokens in JavaScript
Google’s recent announcement of a proposed ‘Device Bound Session Credentials’ feature[1] for Chrome reminded me of a project we worked on last year at my company. We focus on fraud prevention at signup and login (preventing multi-accounting and account theft), but some customers were concerned about post-login security and asked us to add a session hijacking prevention feature to our fraud prevention API. In the end, we decided to just implement a solution in Javascript. We call it session-lock, and it can be used today across all browsers[2] and, theoretically, native mobile apps. For a…
Device-Bound Session Tokens in JavaScript is a security library that prevents session hijacking by binding session tokens to specific devices. Developed for fraud prevention specialists and application developers, it… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Device-Bound Session Tokens in JavaScript launched in 2024; newer entries below may have overtaken it.
- 1
So the main purpose here is to show _a_ way that session-token theft can be mitigated. Clearly, this isn't NSA proof or something you'd use to secure a BL5 containment facility, but to prevent session-jacking; if feels like it could help a lot, and would be pretty quick and easy to roll out if an IDP wanted to implement it.
2024 · github.com · its alternatives →
- 2
A protocol for secure browser sessions on the World Wide Web
2023 · websession.dev · its alternatives →
- 3
Secure password manager and digital wallet.
2017 · 1password.com · its alternatives →
- 4
lockrMail▲195Own the power to organize and protect your email inbox
2021 · app.lockrmail.com · its alternatives →
- 5
I wrote this after the case of a Washington Post reporter, Hannah Natanson, was compelled to unlock her computer with her fingerprint. This resulted in access to her Desktop Signal on her computer, revealing sources and their conversations. https://www.yahoo.com/news/articles/washington-post-raid-pro... Edit: I've a lot more details about the legality and precedence on the apps landing page https://paniclock.github.io/
Apr 2026 · github.com · its alternatives →
- 6
Keep unauthorized users out of your computer
2022 · typingdna.com · its alternatives →
- 7
Google Titan▲261A 2FA device to protect yourself from hackers
2018 · store.google.com · its alternatives →
- 8
Password-protect URLs using AES in the browser; create hidden bookmarks without a browser extension - jstrieb/link-lock
2020 · github.com · its alternatives →
- 9
LoginLlama▲95Hey HN I recently rebuilt my microsaas Loginllama. It uses the same stack but I've made the API much much better and it's now a product I'm happy to promote. As with most developers I hide behind building instead of marketing. As this a developer focused product, this is me marketing! It's a product built in anger for myself when I had to implement a similar system for a number of clients. I released it as I assume that other people had the same problem. There are SDK's available for Nodejs, PHP and Python. Auth0 and Wordpress integrations are coming soon. Let me know what you think and if…
2023 · loginllama.app · its alternatives →
- 10
A Chrome Extension to help resecure hacked accounts
2019 · chromewebstore.google.com · its alternatives →
- 11
- 12
ShareAccount▲167Share your account without giving out your password
2017 · shareaccount.nicosantangelo.com · its alternatives →
- 13
- 14
Tokenary▲105Seamless cross-device Ethereum wallet for devices
2018 · tokenary.io · its alternatives →
- 15
- 16
- 17
PageLock▲6Hey HN! I'm the creator of PageLock. I built this because I kept running into situations where I needed to share sensitive URLs (private docs, beta links, etc.) but didn't want to trust a third-party service with the data. How it works: - Client-side AES-256-GCM encryption using Web Crypto API - Your password and original URL are encrypted in the browser before storage - Zero-knowledge architecture - None can decrypt links without the password - except someone manages to break AES-256 :0 - Pure frontend (React + TypeScript), no backend database The key insight: by doing encryption…
Nov 2025 · pagelock.top · its alternatives →
- 18
- 19
Signed Pages▲75A browser extension to verify the authenticity of websites
2018 · github.com · its alternatives →
- 20DA
- 21
Hey y'all, This is something I've been working on for a few months. It is a passkey system, similar to Apple Passkeys or a Yubikey, but it is entirely software based so you can sync credentials between devices. Passkeys (and FIDO devices in general) allow you to use public keys instead of passwords or codes to authenticate. For instance, you can just click "Approve" on the device/software instead of having to copy a code, and there are no passwords to phish. This is a new piece of tech, so website support for logins are still limited, but it can currently be used for 2FA anywhere a…
2022 · bulwark.id · its alternatives →
- 22
Real-time authentication session tracking for Node.js apps
Jan 2026 · npmjs.com · its alternatives →
- 23
Protect PII and sensitive information in any web app
Apr 2026 · lockisecurity.com · its alternatives →
- 24
AppLockr▲16AppLockr — Lock Any App on macOS Behind Authentication!
2025 · minecraftpro-glitch.github.io · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →