Chromia
Start Building

09 / 11Beginner

Security

Web3 platforms are designed from the start to be decentralized and trustless, so security sits at the center of the architecture rather than being bolted on later.

In practical terms, a dapp's data and logic are copied across many servers run by different entities. To break the system, an attacker would have to compromise several of those systems at the same time, which makes attacks much harder.

This replication also protects you from single points of failure. When one node goes offline, other nodes can still run your dapp.

Blockchain platforms rely on cryptography to keep data intact. A transaction cannot be changed after it is added to the blockchain. Users also sign their transactions cryptographically, which proves the transaction is authentic and establishes ownership that cannot be disputed.

Because the platform itself provides these properties, Web3 has a security advantage.

Web2 security

  • Most Web2 stacks include mature, widely available authentication and security solutions.
  • A centralized system is a single point of failure: one breach can put the whole system at risk.

Web3 security

  • Decentralization cuts down on single points of vulnerability.
  • Cryptography is built into the system, guaranteeing data integrity and authenticating users.

Chromia makes authentication easy for developers

Web2 authentication is familiar and mature, but it still has its own problems. The earlier authentication comparison showed that Chromia gives you a simple, secure way to authenticate users through the Chromia FT4 library. FT4 handles authentication and authorization when users sign and send transactions. You get an experience no harder than Web2 authentication, plus the security benefits of Web3.

The next lesson covers how dapps collect revenue and how you pay to run them.

Written for this site from Chromia’s public course. Code samples are the course’s own.