track: who are you

5 articles · newest first

Flat illustration of a person past a door marked with a checkmark, now stopped at an inner gate by a guard checking a list

The app knows who you are — that's not the same as what you're allowed to touch

Logged in isn't the same as allowed, and the gap between the two is where data leaks. Tap the toggle to see who can read what.

Aliteq Team · Sep 26 · 4 min

Flat illustration of a person approving a request on a phone marked Google, which hands a small token card to a separate app

Build

"Sign in with Google" never gives the app your Google password — here's the trade

You approve on Google's page, the app gets a token and a little profile info, and that's one less password anyone can leak. Why it's often the safer button.

Aliteq Team · Sep 26 · 4 min

Flat illustration of a person getting a glowing wristband at a door, then being waved through a second gate by flashing it

BuildInteractive

The wristband that keeps you logged in — and what happens if someone copies it

You don't send your password with every tap. After login the server hands your device a token, and whoever holds it is treated as you. Tap to see it change hands.

Aliteq Team · Sep 26 · 4 min

Flat illustration of a password going into a one-way funnel and coming out as a scrambled block, with a person unable to run it backwards

Build

A good app can't email you your own password — that's the feature

If a service can show you your password, it stored it wrong. What a hash is, why "salt" matters, and the one red flag that tells you an app is unsafe.

Aliteq Team · Sep 26 · 4 min

Flat illustration of a person holding a key up to a friendly locked door with a small window, a checkmark glowing inside

BuildInteractive

Logging in doesn't prove you're you — it proves you hold something

What an app actually checks when you log in, and the session it starts the moment you pass. Tap through a real login.

Aliteq Team · Sep 26 · 4 min