🔒Best Website Security Practices

This dead-simple extension allows you to block distracting websites for a period of time your specify. You get to decide which websites to whitelist and which ones to blacklist. Block & Focus comes with statistics, keyboard shortcuts, breaks, and a few other functionalities but is overall a really simple and effective tool.

Limit allows you to put time limits on distracting websites. You get to choose how many minutes a day you're allowed to spend on each. After that, the website is blocked. It's a simple and effective tool for avoiding distractions and rabbit holes.

Supabase is the open-source alternative to Firebase. Like Firebase, it's a complete app development platform with user authentication, cloud functions, APIs, Postgres database, storage, vector embeddings, and other features. Supabase projects come with PostgreSQL's policy engine for fine-grained user access rules. It has social login integrations with Google, Facebook, GitHub, Azure (Microsoft), Gitlab, Twitter, Discord, and many more. They offer a customizable authentication component for React. Phone login and MFA can be added through third-party SMS providers such as Twilio or Bird. The free tier comes with 50,000 monthly active users. The Pro plan, at $25/month, comes with 100,000 MAUs and $0.00325/MAU beyond that.

Clerk is a comprehensive user management and authentication platform designed to streamline how developers handle user accounts within web and mobile applications. It offers a suite of embeddable UI components—such as <SignIn/>, <SignUp/>, <UserButton/>, and <UserProfile/>—that integrate seamlessly into your application without redirecting users off-site. These components are fully customizable to match your brand, making the user experience cohesive and frictionless. Under the hood, Clerk provides a robust API and SDKs compatible with modern frameworks like Next.js, Remix, React, and Expo. It handles the entire authentication lifecycle, supporting multifactor authentication (MFA), session management, passwordless sign-in (via magic links or one-time passcodes), and traditional password-based methods with breach detection. The platform also integrates social sign-on (SSO) with over 20 providers, enabling quick user onboarding while adhering to security best practices. Clerk’s security posture includes SOC 2 Type 2 certification and CCPA compliance, with continuous third-party audits and penetration testing. Fraud prevention measures, like disposable email blocking and bot detection powered by machine learning, are built-in to reduce spam and abusive sign-ups. For B2B SaaS applications, Clerk provides advanced multi-tenancy features, enabling organization-based user management with custom roles, permissions, auto-join functionality based on email domains, and invitation systems—all accessible through both code and an admin dashboard. Developers benefit from rapid integration, significantly reducing the time spent on building authentication systems from scratch. Clerk acts as the single source of truth for user data and integrates seamlessly with popular backend services like Supabase, Firebase, and Convex. With free access for up to 10,000 monthly active users, it’s positioned as a scalable solution that grows with your application’s needs.

Auth0 is an identity and access management (IAM) platform designed to simplify authentication and authorization for applications. It provides a flexible solution that allows developers to implement secure login systems without having to build them from the ground up. Auth0 supports various authentication methods, including username-password credentials, social logins (like Google, Facebook, and GitHub), enterprise identity providers (such as Active Directory and SAML-based systems), and passwordless options. The platform is highly adaptable, offering over 30 software development kits (SDKs) that cater to a wide range of languages and frameworks—JavaScript, Python, .NET, iOS, Android, and more. This makes integration straightforward regardless of the tech stack. Beyond basic authentication, Auth0 offers advanced features like multi-factor authentication (MFA), single sign-on (SSO), and fine-grained authorization. These tools enable organizations to enforce complex access control policies, supporting both role-based (RBAC) and attribute-based (ABAC) models. Auth0 also addresses enterprise needs through features like user provisioning, directory synchronization, and support for B2B, B2C, and B2E use cases. It’s designed with scalability in mind, making it suitable for both startups and large enterprises. The platform’s extensibility allows developers to customize authentication flows, implement rules for conditional access, and integrate third-party services. Since its acquisition by Okta, Auth0 operates as a product unit under the Okta umbrella, complementing Okta’s broader suite of identity solutions while maintaining a developer-first focus. This combination brings together Okta’s enterprise-grade security with Auth0’s developer-centric approach, offering a comprehensive solution for modern identity challenges.

Google's Firebase is an entire app development platform that's packed with features.It comes with storage, cloud functions, monitoring and, of course, user authentication. The free tier comes with 50,000 MAUs. Beyond that pricing start at $0.0055/MAU and goes down to as low as $0.0025/MAU as you scale to millions of users. Firebase authentication supports email and password auth, phone auth, magic links, two-factor authentication and social identity providers - mainly Google, Google Play Games, Facebook, Apple, Microsoft, Twitter, GitHub and OAuth access tokens.

GoPasswordless is an authentication service and SDK that focuses on enabling passwordless authentication flows in web apps.

Allboilerplates is a directory of starter kits that helps people find boilerplate code for their tech stack. Head on over to allboilerplates.com to find the perfect boilerplate for you!

Looking to implement structured data and don't know where to start? Google has excellent docs that explain what kind of structured data you need to provide to get certain types of search results. Bredcrumbs, articles, carousels, courses, reviews, FAQs, products, recipes and more - it's all covered there!

SaaSBoilerplates.dev is a curated directory that showcases a wide range of SaaS boilerplates, starter kits, and frameworks to help developers quickly launch their SaaS projects. The website features a carefully selected collection of tools and resources that cover various aspects of SaaS development, from authentication and payments to user management and deployment. Key Features 1. Extensive collection: SaaSBoilerplates.dev offers a comprehensive selection of SaaS boilerplates, catering to different frameworks, tech stacks, and development needs. 2. Curated by hand: The boilerplates are hand-picked and reviewed by a human to ensure quality, reliability, and relevance. No scraping, no AI-generated crap. 3. Detailed information: Each boilerplate listing includes a description, pricing, and key features to help readers make informed decisions. 4. Variety of use cases: The boilerplates cover a wide range of SaaS applications, including marketplaces, AI tools, landing pages, and more. Benefits 1. Time-saving: By leveraging pre-built boilerplates, developers can significantly reduce the time and effort required to set up the foundation of their SaaS project. 2. Cost-effective: Using boilerplates can help lower development costs by providing a solid starting point and reducing the need for custom development. 3. Scalability: Many boilerplates are designed with scalability in mind, making it easier to grow and expand the SaaS application as it gains traction. 4. Reduced technical debt: By using well-tested and maintained boilerplates, developers can minimise the risk of technical debt and ensure the long-term stability of their SaaS application. By leveraging the resources available on SaaSBoilerplates.dev, users can focus on building their core product features and bringing their SaaS ideas to life faster than ever before.

Clerk is a comprehensive user management and authentication platform designed to streamline how developers handle user accounts within web and mobile applications. It offers a suite of embeddable UI components—such as <SignIn/>, <SignUp/>, <UserButton/>, and <UserProfile/>—that integrate seamlessly into your application without redirecting users off-site. These components are fully customizable to match your brand, making the user experience cohesive and frictionless. Under the hood, Clerk provides a robust API and SDKs compatible with modern frameworks like Next.js, Remix, React, and Expo. It handles the entire authentication lifecycle, supporting multifactor authentication (MFA), session management, passwordless sign-in (via magic links or one-time passcodes), and traditional password-based methods with breach detection. The platform also integrates social sign-on (SSO) with over 20 providers, enabling quick user onboarding while adhering to security best practices. Clerk’s security posture includes SOC 2 Type 2 certification and CCPA compliance, with continuous third-party audits and penetration testing. Fraud prevention measures, like disposable email blocking and bot detection powered by machine learning, are built-in to reduce spam and abusive sign-ups. For B2B SaaS applications, Clerk provides advanced multi-tenancy features, enabling organization-based user management with custom roles, permissions, auto-join functionality based on email domains, and invitation systems—all accessible through both code and an admin dashboard. Developers benefit from rapid integration, significantly reducing the time spent on building authentication systems from scratch. Clerk acts as the single source of truth for user data and integrates seamlessly with popular backend services like Supabase, Firebase, and Convex. With free access for up to 10,000 monthly active users, it’s positioned as a scalable solution that grows with your application’s needs.

Stytch provides a suite of tools designed to simplify authentication, authorization, and security for web and mobile applications. If you're developing an app and need a way for users to log in—whether with passwords, passkeys, or entirely passwordless methods—Stytch offers APIs and SDKs that handle these complexities. Their focus is on making authentication seamless for both developers and end-users while ensuring high security standards. For businesses, particularly B2B SaaS companies, Stytch enables advanced features like multi-tenancy, role-based access control (RBAC), and single sign-on (SSO). They provide an embeddable admin portal, allowing enterprise customers to manage their own authentication configurations, organizational settings, and integrations with identity providers—without constant developer involvement. Stytch places a strong emphasis on scalability and flexibility. Their tools are designed to “just work” across a range of use cases, from simple consumer apps to complex enterprise platforms. Developers can choose how much of the authentication flow they want to control—using pre-built UI components for quick implementation or leveraging headless SDKs and backend APIs for a fully customized experience. Security and fraud prevention are also core to Stytch’s offering. They provide real-time bot detection, device-aware multi-factor authentication, and intelligent rate limiting to protect against credential stuffing and other forms of account abuse. Their infrastructure ensures that login codes and authentication requests are delivered reliably, even when SMS or email providers fail. Stytch supports a broad range of programming languages and frameworks, including Python, Node.js, Java, React, and iOS, making integration into existing tech stacks straightforward. Their platform is designed for developers who want to build secure, user-friendly authentication systems without reinventing the wheel.

Amazon Cognito is an identity platform for web and mobile apps. It’s a user directory, an authentication server, and an authorization service for OAuth 2.0 access tokens and AWS credentials. With Amazon Cognito, you can authenticate and authorize users from the built-in user directory, from your enterprise directory, and from consumer identity providers like Google and Facebook.

Ahrefs has a generous free tier that allows you to view your domain ranking, track backlinks, view organic keywords, analyze page and backlink health, check out competitors and many more. Once you sign up and connect your domain, you'll get weekly reports on your SEO progress.

Telescope is an All-in-One SEO Toolkit that lets you research keywords, track rankings, analyze competitors, create and optimize content, improve your website, and more.

Rank Anything is your ultimate top picks guide in any category in the world. Discover top rated books, foods, countries, products, films, music, habits, workout routines, websites and anything in between. If you can think it, you can rank it.

Indie Hackers Stacks is a directory of indie products with their software stacks. You can use it to discover the tools that other makers use to build their products. Publish your own stack and get free exposure and some SEO juice.

Sell your unused domains effortlessly. Skip the hassle of transfers and intermediaries.

This was my go-to page at the early stages of learning Mandarin. Chinese Grammar Wiki has an articles of each of the main aspects of Chinese grammar. For example, there are articles on how to use 一下, 在, 要, 就是, 才and many other Mandarin grammar points. Each word gets its own article with examples in pinyin and characters and, of course, English translations. You can also get website as a physical book or an ebook.

The Australian Citizenship Tests app is a tool that helps you get ready for the Australian citizenship test. It’s made to be simple and easy to use, giving you practice questions, full-length tests, and helpful study materials. The questions are based on official resources, so you’ll get a good idea of what the real test is like. You can use the app on your phone or laptop, and there’s no limit to how many practice tests you can take. The app tracks your progress, so you’ll know which topics you need to work on. There’s also a demo with audio explanations if you prefer listening while studying. The app was created by Jogi, an independent developer who originally built it to help his wife prepare for her test. He noticed there weren’t many good resources available, so he decided to make one that’s clear, useful, and easy for anyone to use. Many people have found the app helpful. Users from different countries—like Sweden, Iran, Vietnam, Brazil, and Pakistan—say it made studying less stressful and boosted their confidence. Over 3,000 people are currently using it, and the platform has recorded thousands of answered questions and practice tests taken. There’s a 7-day free trial, and if you’re not happy with it, there’s a money-back guarantee. To qualify for that, you’ll need to complete all the practice tests in the app. The prices are in US dollars, and your personal information is kept secure. If you want, you can also check out their blog for study tips, test-day advice, and information about Australian history and culture.

Tomasz Stefaniak made this website and therefore deserves the #1 spot.

Sell your unused domains effortlessly. Skip the hassle of transfers and intermediaries.

KentekenGids is a premier Dutch online platform for comprehensive vehicle information. This user-friendly website offers a range of services centered around vehicle data: - Extensive Database: Users can access detailed information on more than 15 million vehicles registered in the Netherlands by simply entering a license plate number. - Multi-Source Reports: The platform aggregates data from authoritative sources including the RDW (Dutch Road Transport Agency), NAP (National Auto Pass), and APK (Dutch MOT equivalent) to provide thorough vehicle histories. - Security Checks: Visitors can quickly verify if a vehicle has been reported stolen, enhancing security for potential buyers. - Odometer Fraud Prevention: The site allows users to review a vehicle's recorded mileage history, helping to identify potential discrepancies. - Insurance Insights: KentekenGids provides valuable information about a vehicle's insurance status and history. By offering both complimentary and premium license plate checks, KentekenGids empowers consumers and businesses to make well-informed decisions in various automotive transactions, from purchases and sales to insurance considerations. The platform's ultimate goal is to increase transparency in the Dutch automotive market.

Google Search Console lets you see your site's Google traffic and to help Google index your pages. You can view the number of search impressions, search clicks, keywords used, track links to your pages, check core web vitals, crawl stats etc. You can also manually request crawling of certain pages and upload site maps.

With SEO Stuff's free keyword generator you get up to 20 keyword suggestions for every keyword you enter for free. For each keyword, you can find out how difficult it is to rank and what the average search volume is. It supports multiple keyword languages.

Ahrefs has a generous free tier that allows you to view your domain ranking, track backlinks, view organic keywords, analyze page and backlink health, check out competitors and many more. Once you sign up and connect your domain, you'll get weekly reports on your SEO progress.

AnswerThePublic is a great tool for generating content ideas. Enter the keyword and it will help you discover all the major Google searches that contain that keyword. For example, type in "ranking" and you can get suggestions for "ranking of taylor swift songs", "ranking list", "ranking of us presidents", "ranking fallout games", "ranking nfl stadiums", "ranking true detective seasons" and many, many more. AnswerThePublic has a free tier with three free searches per day.

Luthor is an AI-powered platform designed for startups, SaaS companies, and professional services to enhance their SEO and content marketing efforts. The platform automates the creation of large-scale, SEO-optimized content, focusing on long-tail keywords to drive exponential organic traffic growth. Luthor’s key features include programmatic SEO, AI-driven competitor analysis, automated content and code optimization, and scalable content generation. It offers cost and time efficiency by simplifying complex SEO tasks into one-click actions, continuously optimizing content to stay ahead of search algorithm changes and competitors, and enabling businesses to scale their online presence and drive growth without heavy investment in manual efforts.