# Security

Learn how to protect user accounts, credentials, and tokens in applications that use FusionAuth.

> For the index of this section of the site, see [llms.txt](https://fusionauth.io/docs/llms.txt)

These pages cover protecting user accounts, user credentials, and the tokens your apps receive. To secure the servers and network that run a self-hosted instance, see [Harden](https://fusionauth.io/docs/deploy/harden.md).

To get security announcements as a FusionAuth customer, log into [account.fusionauth.io](https://account.fusionauth.io) and make sure your account has the `Security Officer` role.

## Account Protection

[Account Enumeration Learn which FusionAuth responses reveal whether an account exists, and how to reduce what they reveal.](https://fusionauth.io/docs/security/account-protection/account-enumeration.md)

[Account Lockout Learn how to set up user account locking rules.](https://fusionauth.io/docs/security/account-protection/account-lockout.md)

[Advanced Threat Detection Learn about the FusionAuth Advanced Threat Detection feature that provides various tools to secure your application.](https://fusionauth.io/docs/security/account-protection/advanced-threat-detection.md)

[Breached Password Detection Learn how to configure and use breached password detection.](https://fusionauth.io/docs/security/account-protection/breached-password-detection.md)

[Risk Signals Learn about the risk signals that FusionAuth uses to identify suspicious activity and influence intelligent MFA decisionmaking.](https://fusionauth.io/docs/security/account-protection/risk-signals.md)

## Tokens and Keys

[Key Master Learn how to create, import, and manage signing keys and certificates with Key Master.](https://fusionauth.io/docs/security/tokens-and-keys/key-master.md)

[Key Rotation Learn how to rotate keys in FusionAuth.](https://fusionauth.io/docs/security/tokens-and-keys/key-rotation.md)

[Token Storage Learn how to secure tokens generated by FusionAuth.](https://fusionauth.io/docs/security/tokens-and-keys/token-storage.md)

## Clients

[CIMD Security Learn how FusionAuth protects itself when it fetches a Client ID Metadata Document from a URL a third party controls.](https://fusionauth.io/docs/security/clients/cimd-security.md)

[CORS Reference Learn about FusionAuth and Cross-Origin Resource Sharing (CORS) configuration.](https://fusionauth.io/docs/security/clients/cors.md)

## Compliance

[GDPR Compliance Learn how FusionAuth approaches GDPR compliance.](https://fusionauth.io/docs/security/compliance/gdpr.md)

Related

[Security Account Lockout Learn how to set up user account locking rules. account lockoutaccount security](https://fusionauth.io/docs/security/account-protection/account-lockout.md)

[Security Advanced Threat Detection Learn about the FusionAuth Advanced Threat Detection feature that provides various tools to secure your application. threat detectionsecurity](https://fusionauth.io/docs/security/account-protection/advanced-threat-detection.md)

[Security Key Rotation Learn how to rotate keys in FusionAuth. key rotationsecurity](https://fusionauth.io/docs/security/tokens-and-keys/key-rotation.md)

[Security Token Storage Learn how to secure tokens generated by FusionAuth. token storagesecurity](https://fusionauth.io/docs/security/tokens-and-keys/token-storage.md)