But doing that, in some minutes or hours the attackers would have guessed the correct username and password, with the "help" of our application, just using the time taken to answer.

#### Fix it with `secrets.compare_digest()`

  - author: Amit Chaudhary
    author_link: https://twitter.com/amitness
    link: https://amitness.com/2020/06/fastapi-vs-flask/
    title: FastAPI for Flask Users
  - author: Louis Guitton
    author_link: https://twitter.com/louis_guitton
    link: https://guitton.co/posts/fastapi-monitoring/
    title: How to monitor your FastAPI service
  - author: Precious Ndubueze
    author_link: https://medium.com/@gabbyprecious2000

<a href="https://www.codacy.com/?utm_source=github&utm_medium=sponsors&utm_id=pioneers" target="_blank" title="Take code reviews from hours to minutes"><img src="https://fastapi.tiangolo.com/img/sponsors/codacy.png"></a>

<!-- /sponsors -->

<a href="https://fastapi.tiangolo.com/fastapi-people/#sponsors" class="external-link" target="_blank">Other sponsors</a>

    title: Svix - Webhooks as a service
    img: https://fastapi.tiangolo.com/img/sponsors/svix.svg
  - url: https://www.codacy.com/?utm_source=github&utm_medium=sponsors&utm_id=pioneers
    title: Take code reviews from hours to minutes
    img: https://fastapi.tiangolo.com/img/sponsors/codacy.png
bronze:
  - url: https://www.exoflare.com/open-source/?utm_source=FastAPI&utm_campaign=open_source
    title: Biosecurity risk assessments made easy.