I'm starting a project that will work with inventory information and other more sensitive business data so I decided to do 2 (two) login levels as in banking systems.
1st authentication
- Consists of providing email and password chosen by the user.
2nd authentication
- Consists of providing username and password given by the system itself.
How to make login pages use only HTTPS as communication protocol and data transfer?