Inspiration We wanted to build the “most secure” site ever… then realized most security is just vibes. So we made the world’s first intentionally insecure login experience chaotic, funny, and a reminder of what not to do.

What it does Super Secure Site is a parody auth system that proudly fails at security:

  • Shows your password every 10 seconds
  • Lets you reset it with zero verification
  • Tracks your IP, login history, and “secret hobbies”
  • Includes a QR code that rickrolls you
  • Has a Steal My Data button that does exactly that

How we built it

  • Next.js, React, TypeScript
  • Dynamic QR via external API
  • useState, useEffect, sessionStorage
  • Hosted on Vercel
  • Powered by pizza and poor decisions

Challenges

  • Making things less secure on purpose
  • Dynamic QR codes across localhost + prod
  • Git permission chaos

Accomplishments

  • Fully functional parody auth system
  • QR code that betrays you (intentionally)
  • A dramatic “compromised” page
  • Taught security lessons through jokes

What we learned

  • GitHub permissions = pain
  • Always check QR URLs
  • Bad security is way more fun

Built With

Share this project:

Updates