[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"\u002Farticles\u002Fa-well-known-folder":3},{"id":4,"title":5,"body":6,"date":94,"description":95,"extension":96,"head":97,"imageUrl":77,"meta":98,"navigation":99,"ogImage":97,"path":100,"robots":97,"schemaOrg":97,"seo":101,"sitemap":102,"stem":103,"__hash__":104},"articles\u002Farticles\u002F13.A-well-known-folder.md","A well-known folder",{"type":7,"value":8,"toc":87},"minimark",[9,13,17,26,31,34,43,46,49,52,56,59,62,65,69,72,78,81],[10,11,5],"h1",{"id":12},"a-well-known-folder",[14,15,16],"p",{},"Have you ever seen the .well-known folder? I had seen it before, but I did not pay much attention to what it is.\nIt turned out to be a useful thing, especially in one case that is directly related to user experience.",[14,18,19,20,25],{},"But first, a shameless plug: I have ",[21,22,24],"a",{"href":23},"\u002Fconsulting","two slots for UI\u002FUX Advisory and unlimited slots for one-time review",".",[27,28,30],"h2",{"id":29},"what-is-well-known","What is .well-known",[14,32,33],{},"It is a standardized hidden root URI (for example, site.com\u002F.well-known), defined by RFC 8615, that acts as a public \"passport\" for your domain.",[14,35,36,37,25],{},"To be precise, ",[21,38,42],{"href":39,"rel":40},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FWell-known_URI",[41],"nofollow","it is not a folder but a URI",[14,44,45],{},"It allows external systems to discover metadata about your site and use it for different purposes.",[14,47,48],{},"Why does it matter? It has many use cases, and some of them are directly related to UX.",[14,50,51],{},"One of them is the change-password URI. Technically, it is not really a file - it can be a redirect, a page, or anything else behind that URL.",[27,53,55],{"id":54},"change-password","Change password",[14,57,58],{},"The .well-known area might contain files, but not only files. You can set up redirects as well.",[14,60,61],{},"If you redirect site.com\u002F.well-known\u002Fchange-password to the page where users can actually change their password (for example, site.com\u002Faccount\u002Fchange-password), password managers and browsers can take users directly there.",[14,63,64],{},"If a password manager, browser, or another app knows a password was leaked, it can suggest changing it.\nWhen users press the \"change password\" button, they get redirected to the exact location they need.",[27,66,68],{"id":67},"securitytxt","Security.txt",[14,70,71],{},"Another useful case is putting Security.txt in the .well-known URI.\nIt is used to tell people how to contact you if they find a vulnerability.",[73,74],"v-image",{":hasBorder":75,":rounded":75,"alt":76,"src":77},"true","Example security.txt content","\u002Fimg\u002Fwell-known-folder\u002Fsecurity-txt-email.png",[14,79,80],{},"As you can see, it can include fields like how to contact you, when the file expires, and the preferred language.",[14,82,83],{},[21,84,86],{"href":39,"rel":85},[41],"There are dozens of defined URIs for this folder.",{"title":88,"searchDepth":89,"depth":89,"links":90},"",2,[91,92,93],{"id":29,"depth":89,"text":30},{"id":54,"depth":89,"text":55},{"id":67,"depth":89,"text":68},"2026-02-24T03:39:55+04:00","What the .well-known URI is, why it matters for UX, and how the change-password and security.txt endpoints help users and security researchers.\n","md",null,{},true,"\u002Farticles\u002Fa-well-known-folder",{"title":5,"description":95},{"loc":100},"articles\u002F13.A-well-known-folder","DYQIb3XEWgM2ALw0WvVT2Fz9ZUxeK4bk_-QuCZtytaM"]