Security
Mystery user accounts in Joomla 4: the profile save that forgets to check login
Accounts you never approved keep appearing, and turning off registration does nothing to stop them. The way in is often a profile…
14 October 2026 · 5 min read
Topic
Security
9 articles.
Security
Two-factor login for Joomla administrators, without an extension
Joomla has had multi-factor authentication in the core since 4.2. Here is how to switch it on, force it for administrators and…
14 October 2026 · 3 min read
Security
Who changed that? The user actions log
Something on the site is different and nobody admits to it. Joomla has kept a record the whole time, and most people never look.
6 August 2026 · 2 min read
Security
The privacy tools Joomla already has
If someone asks you for a copy of everything you hold on them, Joomla can produce it. Most site owners do not know the component…
6 August 2026 · 2 min read
Security
User groups and access levels are not the same thing
Joomla has two permission systems that look alike and do different jobs. Confusing them is why "I set it to Registered and it…
6 August 2026 · 2 min read
Security
CAPTCHA in Joomla 6: reCAPTCHA is gone
If you are following an older guide, it will tell you to enable the Google reCAPTCHA plugin. Joomla 6 does not ship one any more…
6 August 2026 · 2 min read
Security
Mastering Joomla's ACL (Access Control List)
Joomla's integrated ACL (Access Control List) allows you to define granular access rights for different types of users. To…
2 May 2025 · 1 min read
Security
Security-First Input Handling
Using JInput instead of directly accessing superglobals ensures proper filtering of user input, helping create more secure…
2 May 2025 · 1 min read
Security
Users deactivated for no reason?
It happens that registered users get deactivated for what seems to be no reason. Well that is not the case. the following actions…
30 April 2025 · 1 min read