Varbase Security

Manages general security configurations, with password policy, username enumeration prevention, security kit and review.

Varbase Security Module

Varbase security features are bundled through the Varbase Security module as part of the Varbase Core module. GitHub: https://github.com/Vardot/varbase_core Drupal.org: https://www.drupal.org/project/varbase_core

After building a project using the varbase-project template, you can see the code of the Varbase Security module in:

project_directory
|-- docroot
    |-- modules
        |-- contrib
            |-- varbase_core
                |-- modules
                    |-- varbase_security

Brings in the following core and contributed modules to your site:

Module	Purpose
CAPTCHA	Provides the CAPTCHA API for adding challenges to arbitrary forms.
reCAPTCHA	Protect your website from spam and abuse while letting real people pass through with ease.
Honeypot	Mitigates spam form submissions using the honeypot method.
Antibot	Prevent forms from being submitted without JavaScript enabled.
Password Policy	Sets up constraints and expiration of passwords.
Password Character Types Policy	Minimum number of different character types the password must contain.
Password Characters of Type Policy	Minimum characters of a particular type the password must contain.
Password Policy History	Sets up a password constraint to limit repeated use of the same password.
Password Character Length Policy	Sets up a character length constraint for passwords.
Password Username Policy	Restrict users from having their username in their password.
Security Kit	Enhance security of your Drupal website.
Username Enumeration Prevention	Removes the error message produced by the forgot password form,when an invalid user has been supplied.
Flood control	Allows configuring hidden flood control options and unblocking IP addresses and user ID's that are blocked after multiple failed login attempts.

Configuring Security Features