Protecting login, password-reset and contact forms too

Although Veritus is built for signup, the widget's data-veritus attribute also accepts login, password-reset and contact.

Several signals carry straight over to these flows — a breached password (PASSWORD_BREACHED) or an IP-country mismatch (IP_COUNTRY_MISMATCH) is just as meaningful at login as at signup. Tagging a contact form helps cut spam submissions using the same behavioural and IP signals.

Bear in mind the model is tuned for signup risk, so for login-protection use-cases it is worth reviewing your thresholds and, if it is a core need, talking to support about the best configuration for your traffic.