diff --git a/core/class/layout.class.php b/core/class/layout.class.php
index 6d31836..e8e0dbf 100644
--- a/core/class/layout.class.php
+++ b/core/class/layout.class.php
@@ -330,7 +330,7 @@ class layout extends common
         // Affichage du lien de connexion
         if (
             ($this->getData(['theme', 'footer', 'loginLink'])
-                and $this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')
+                and $this->isConnected() === false
             )
             or $this->getUrl(0) === 'theme'
         ) {
@@ -547,7 +547,7 @@ class layout extends common
         // Lien de connexion
         if (
             ($this->getData(['theme', 'menu', 'loginLink'])
-                and $this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')
+                and $this->isConnected() === false
             )
             or $this->getUrl(0) === 'theme'
         ) {
@@ -592,9 +592,9 @@ class layout extends common
 
             if (
                 ($this->getData(['page', $parentPageId, 'disable']) === true
-                    and $this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')
+                    and $this->isConnected() === false
                 ) or ($this->getData(['page', $parentPageId, 'disable']) === true
-                    and $this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+                    and $this->isConnected() === true
                     and $this->getUser('group') < self::GROUP_EDITOR
                 )
             ) {
@@ -658,9 +658,9 @@ class layout extends common
                 $items .= '<li id=' . $childKey . '>';
                 if (
                     ($this->getData(['page', $childKey, 'disable']) === true
-                        and $this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')
+                        and $this->isConnected() === false
                     ) or ($this->getData(['page', $childKey, 'disable']) === true
-                        and $this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+                        and $this->isConnected() === true
                         and $this->getUser('group') < self::GROUP_EDITOR
                     )
                 ) {
@@ -754,7 +754,7 @@ class layout extends common
                 $items .= '<li class="menuSideChild">';
                 if (
                     $this->getData(['page', $parentPageId, 'disable']) === true
-                    and $this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')
+                    and $this->isConnected() === false
                 ) {
                     $items .= '<a href="' . $this->getUrl(1) . '">';
                 } else {
@@ -778,7 +778,7 @@ class layout extends common
 
                 if (
                     $this->getData(['page', $childKey, 'disable']) === true
-                    and $this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')
+                    and $this->isConnected() === false
                 ) {
                     $itemsChildren .= '<a href="' . $this->getUrl(1) . '">';
                 } else {
@@ -914,7 +914,7 @@ class layout extends common
      */
     public function showBar()
     {
-        if ($this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')) {
+        if ($this->isConnected() === true) {
             // Items de gauche
             $leftItems = '';
             // Sélecteur de contenu
@@ -1213,7 +1213,7 @@ class layout extends common
         $vars = 'var baseUrl = ' . json_encode(helper::baseUrl(false)) . ';';
         $vars .= 'var baseUrlQs = ' . json_encode(helper::baseUrl()) . ';';
         if (
-            $this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+            $this->isConnected() === true
             and $this->getUser('group') >= self::GROUP_EDITOR
         ) {
             $vars .= 'var privateKey = ' . json_encode(md5_file(self::DATA_DIR . 'core.json')) . ';';
diff --git a/core/class/router.class.php b/core/class/router.class.php
index 0f3d984..9cc2c0f 100644
--- a/core/class/router.class.php
+++ b/core/class/router.class.php
@@ -438,7 +438,7 @@ class core extends common
 
 		// Force la déconnexion des membres bannis ou d'une seconde session
 		if (
-			$this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+			$this->isConnected() === true
 			and ($this->getUser('group') === common::GROUP_BANNED
 				or ($_SESSION['csrf'] !== $this->getData(['user', $this->getUser('id'), 'accessCsrf'])
 					and $this->getData(['config', 'connect', 'autoDisconnect']) === true)
@@ -452,8 +452,8 @@ class core extends common
 			$this->getData(['config', 'maintenance'])
 			and in_array($this->getUrl(0), ['maintenance', 'user']) === false
 			and $this->getUrl(1) !== 'login'
-			and ($this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')
-				or ($this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+			and ($this->isConnected() === false
+				or ($this->isConnected() === true
 					and $this->getUser('group') < common::GROUP_ADMIN
 				)
 			)
@@ -472,7 +472,7 @@ class core extends common
 		if ($this->getData(['page', $this->getUrl(0)]) !== null) {
 			if (
 				$this->getData(['page', $this->getUrl(0), 'group']) === common::GROUP_VISITOR
-				or ($this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+				or ($this->isConnected() === true
 					// and $this->getUser('group') >= $this->getData(['page', $this->getUrl(0), 'group'])
 					// Modification qui tient compte du profil de la page
 					and ($this->getUser('group') * 10 + $this->getUser('profil')) >= ($this->getData(['page', $this->getUrl(0), 'group']) * 10 + $this->getData(['page', $this->getUrl(0), 'profil']))
@@ -489,9 +489,9 @@ class core extends common
 			// Empêcher l'accès aux pages désactivées par URL directe
 			if (
 				($this->getData(['page', $this->getUrl(0), 'disable']) === true
-					and $this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')
+					and $this->isConnected() === false
 				) or ($this->getData(['page', $this->getUrl(0), 'disable']) === true
-					and $this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+					and $this->isConnected() === true
 					and $this->getUser('group') < common::GROUP_EDITOR
 				)
 			) {
@@ -538,7 +538,7 @@ class core extends common
 		}
 		// Accès concurrent stocke la page visitée
 		if (
-			$this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+			$this->isConnected() === true
 			&& $this->getUser('id')
 		) {
 			$this->setData(['user', $this->getUser('id'), 'accessUrl', $this->getUrl()]);
@@ -658,7 +658,7 @@ class core extends common
 					// Check le groupe de l'utilisateur
 					if (
 						($module::$actions[$action] === common::GROUP_VISITOR
-							or ($this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+							or ($this->isConnected() === true
 								and $this->getUser('group') >= $module::$actions[$action]
 								and $this->getUser('permission', $moduleId, $action)
 							)
diff --git a/core/core.php b/core/core.php
index e59a86c..9720391 100644
--- a/core/core.php
+++ b/core/core.php
@@ -51,7 +51,7 @@ class common
 	const ACCESS_TIMER = 1800;
 
 	// Numéro de version
-	const ZWII_VERSION = '1.11.01';
+	const ZWII_VERSION = '1.12.00';
 
 	// URL autoupdate
 	const ZWII_UPDATE_URL = 'https://forge.chapril.org/ZwiiCMS-Team/campus-update/raw/branch/master/';
@@ -758,7 +758,7 @@ class common
 				$this->getData(['page', $pageId, 'parentPageId']) === ""
 				// Ignore les pages dont l'utilisateur n'a pas accès
 				and ($this->getData(['page', $pageId, 'group']) === self::GROUP_VISITOR
-					or ($this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+					or ($this->getUser('authKey') === $this->getInput('ZWII_AUTH_KEY')
 						//and $this->getUser('group') >= $this->getData(['page', $pageId, 'group'])
 						// Modification qui tient compte du profil de la page
 						and ($this->getUser('group') * self::MAX_PROFILS + $this->getUser('profil')) >= ($this->getData(['page', $pageId, 'group']) * self::MAX_PROFILS + $this->getData(['page', $pageId, 'profil']))
@@ -789,7 +789,7 @@ class common
 						$this->getData(['page', $parentId, 'group']) === self::GROUP_VISITOR
 					)
 					or (
-						$this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+						$this->getUser('authKey') === $this->getInput('ZWII_AUTH_KEY')
 						and
 						$this->getUser('group') * self::MAX_PROFILS + $this->getUser('profil')) >= ($this->getData(['page', $pageId, 'group']) * self::MAX_PROFILS + $this->getData(['page', $pageId, 'profil'])
 
@@ -1015,6 +1015,13 @@ class common
 		}
 	}
 
+	/**
+	 * @return bool l'utilisateur est connecté true sinon false
+	 */ 
+	public function isConnected() {
+		return ($this->getUser('authKey') === $this->getInput('ZWII_AUTH_KEY'));
+	}
+
 	/**
 	 * Check qu'une valeur est transmise par la méthode _POST
 	 * @return bool
diff --git a/core/layout/main.php b/core/layout/main.php
index 517bdce..3edc65e 100644
--- a/core/layout/main.php
+++ b/core/layout/main.php
@@ -47,7 +47,7 @@
 		if (
 			$this->getData(['theme', 'menu', 'position']) === 'top'
 			and $this->getData(['theme', 'menu', 'fixed']) === true
-			and $this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+			and $this->isConnected() === true
 			and $this->getUser('group') > self::GROUP_MEMBER
 		) {
 			echo '<nav id="navfixedconnected" >';
diff --git a/core/module/course/course.php b/core/module/course/course.php
index e554f91..e89a95b 100644
--- a/core/module/course/course.php
+++ b/core/module/course/course.php
@@ -2038,7 +2038,7 @@ class course extends common
         }
         // Si un utilisateur connecté est admin ou auteur, c'est autorisé
         if (
-            $this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD') &&
+            $this->isConnected() === true &&
             ($this->getUser('group') === self::GROUP_ADMIN ||
                 $this->getUser('id') === $this->getData(['course', $courseId, 'author']))
         ) {
diff --git a/core/module/user/user.php b/core/module/user/user.php
index cedfd74..536ebf2 100644
--- a/core/module/user/user.php
+++ b/core/module/user/user.php
@@ -428,7 +428,8 @@ class user extends common
 					if ($this->getUser('group') < self::GROUP_ADMIN) {
 						if ($this->getInput('userEditNewPassword')) {
 							// L'ancien mot de passe est correct
-							if (password_verify(html_entity_decode($this->getInput('userEditOldPassword')), $this->getData(['user', $this->getUrl(2), 'password']))) {
+							if (password_verify(html_entity_decode($this->getInput('userEditOldPassword')), $this->getData(['user', $this->getUrl(2), 'password']))
+							) {
 								// La confirmation correspond au mot de passe
 								if ($this->getInput('userEditNewPassword') === $this->getInput('userEditConfirmPassword')) {
 									$newPassword = $this->getInput('userEditNewPassword', helper::FILTER_PASSWORD, true);
@@ -1304,18 +1305,28 @@ class user extends common
 					$this->setData(['user', $userId, 'connectFail', 0]);
 					$this->setData(['user', $userId, 'connectTimeout', 0]);
 
+					// Clé d'authenfication
+					$authKey = uniqid('', true) . bin2hex(random_bytes(8));
+					$this->setData(['user', $userId, 'authKey', $authKey]);
+
 					// Validité du cookie
 					$expire = $this->getInput('userLoginLongTime', helper::FILTER_BOOLEAN) === true ? strtotime("+1 year") : 0;
 					switch ($this->getInput('userLoginLongTime', helper::FILTER_BOOLEAN)) {
 						case false:
 							// Cookie de session
 							setcookie('ZWII_USER_ID', $userId, $expire, helper::baseUrl(false, false), '', helper::isHttps(), true);
-							setcookie('ZWII_USER_PASSWORD', $this->getData(['user', $userId, 'password']), $expire, helper::baseUrl(false, false), '', helper::isHttps(), true);
+							//setcookie('ZWII_USER_PASSWORD', $this->getData(['user', $userId, 'password']), $expire, helper::baseUrl(false, false), '', helper::isHttps(), true);
+
+							// Connexion par clé							
+							setcookie('ZWII_AUTH_KEY', $authKey, $expire, helper::baseUrl(false, false), '', helper::isHttps(), true);
 							break;
 						default:
 							// Cookie persistant
 							setcookie('ZWII_USER_ID', $userId, $expire, helper::baseUrl(false, false));
-							setcookie('ZWII_USER_PASSWORD', $this->getData(['user', $userId, 'password']), $expire, helper::baseUrl(false, false));
+							//setcookie('ZWII_USER_PASSWORD', $this->getData(['user', $userId, 'password']), $expire, helper::baseUrl(false, false));
+
+							// Connexion par clé
+							setcookie('ZWII_AUTH_KEY', $authKey, $expire, helper::baseUrl(false, false));
 							break;
 					}
 
@@ -1394,7 +1405,9 @@ class user extends common
 	public function logout()
 	{
 		helper::deleteCookie('ZWII_USER_ID');
-		helper::deleteCookie('ZWII_USER_PASSWORD');
+		//helper::deleteCookie('ZWII_USER_PASSWORD');
+		helper::deleteCookie('ZWII_AUTH_KEY');
+		$this->setData(['user', $this->getUser('id'), 'authKey', '']);
 
 		// Détruit la session
 		session_destroy();
diff --git a/module/blog/blog.php b/module/blog/blog.php
index 4417a92..257ca8f 100755
--- a/module/blog/blog.php
+++ b/module/blog/blog.php
@@ -749,7 +749,7 @@ class blog extends common
 				) {
 					// Check la captcha
 					if (
-						$this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')
+						$this->isConnected() === false
 						//AND $this->getInput('blogArticlecaptcha', helper::FILTER_INT) !== $this->getInput('blogArticlecaptchaFirstNumber', helper::FILTER_INT) + $this->getInput('blogArticlecaptchaSecondNumber', helper::FILTER_INT))
 						and password_verify($this->getInput('blogArticleCaptcha', helper::FILTER_INT), $this->getInput('blogArticleCaptchaResult')) === false
 					) {
@@ -831,7 +831,7 @@ class blog extends common
 				// Signature de l'article
 				self::$articleSignature = $this->signature($this->getData(['module', $this->getUrl(0), 'posts', $this->getUrl(1), 'userId']));
 				// Signature du commentaire édité
-				if ($this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')) {
+				if ($this->isConnected() === true) {
 					self::$editCommentSignature = $this->signature($this->getUser('id'));
 				}
 				// Commentaires en fonction de la pagination
diff --git a/module/blog/view/article/article.php b/module/blog/view/article/article.php
index 9eef66e..6f4eb21 100755
--- a/module/blog/view/article/article.php
+++ b/module/blog/view/article/article.php
@@ -25,7 +25,7 @@
 		<?php echo helper::dateUTF8($module::$dateFormat, $this->getData(['module', $this->getUrl(0), 'posts', $this->getUrl(1), 'publishedOn']), self::$i18nUI) . ' ' . helper::dateUTF8($module::$timeFormat, $this->getData(['module', $this->getUrl(0), 'posts', $this->getUrl(1), 'publishedOn']), self::$i18nUI); ?>
 		<!-- Bloc edition -->
 		<?php if (
-			$this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+			$this->isConnected() === true
 			and
 			(  // Propriétaire
 				($this->getData(['module', $this->getUrl(0), 'posts', $this->getUrl(1), 'editConsent']) === $module::EDIT_OWNER
@@ -88,7 +88,7 @@
 		'readonly' => true
 	]); ?>
 	<div id="blogArticleCommentWrapper" class="displayNone">
-		<?php if ($this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')): ?>
+		<?php if ($this->isConnected() === true): ?>
 			<?php echo template::text('blogArticleUserName', [
 				'label' => 'Nom',
 				'readonly' => true,
@@ -122,7 +122,7 @@
 			'maxlength' => $this->getData(['module', $this->getUrl(0), 'posts', $this->getUrl(1), 'commentMaxlength'])
 		]); ?>
 		<div id="blogArticleContentAlarm"> </div>
-		<?php if ($this->getUser('password') !== $this->getInput('ZWII_USER_PASSWORD')): ?>
+		<?php if ($this->isConnected() === false): ?>
 			<div class="row">
 				<div class="col12">
 					<?php echo template::captcha('blogArticleCaptcha', [
diff --git a/module/blog/view/index/index.php b/module/blog/view/index/index.php
index 691aed7..c4d8186 100755
--- a/module/blog/view/index/index.php
+++ b/module/blog/view/index/index.php
@@ -51,7 +51,7 @@
 						<div class="col6 blogEdit">
 							<!-- Bloc edition -->
 							<?php if (
-								$this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+								$this->isConnected() === true
 								and
 								( // Propriétaire
 									($this->getData(['module', $this->getUrl(0), 'posts', $articleId, 'editConsent']) === $module::EDIT_OWNER
diff --git a/module/news/view/article/article.php b/module/news/view/article/article.php
index b143be5..1567e53 100644
--- a/module/news/view/article/article.php
+++ b/module/news/view/article/article.php
@@ -19,7 +19,7 @@
 		<?php echo helper::dateUTF8('%d %B %Y', $this->getData(['module', $this->getUrl(0), 'posts', $this->getUrl(1), 'publishedOn']), self::$i18nUI) . '&nbsp' . helper::dateUTF8('%H:%M', $this->getData(['module', $this->getUrl(0), 'posts', $this->getUrl(1), 'publishedOn']), self::$i18nUI); ?>
 		<!-- Bloc edition -->
 		<?php if (
-			$this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+			$this->isConnected() === true
 			and
 			(  // Propriétaire
 				($this->getUser('group') === self::GROUP_ADMIN)
diff --git a/module/news/view/index/index.php b/module/news/view/index/index.php
index b0649a5..f15d0b0 100644
--- a/module/news/view/index/index.php
+++ b/module/news/view/index/index.php
@@ -26,7 +26,7 @@
 							<?php echo helper::dateUTF8($module::$dateFormat, $news['publishedOn'], self::$i18nUI) . '&nbsp;' . helper::dateUTF8($module::$timeFormat, $news['publishedOn'], self::$i18nUI); ?>
 							<!-- Bloc edition -->
 							<?php if (
-								$this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+								$this->isConnected() === true
 								and
 								( // Propriétaire
 									($this->getUser('group') === self::GROUP_ADMIN)
diff --git a/module/redirection/redirection.php b/module/redirection/redirection.php
index e96f45f..edb3ed6 100644
--- a/module/redirection/redirection.php
+++ b/module/redirection/redirection.php
@@ -58,7 +58,7 @@ class redirection extends common
 	{
 		// Message si l'utilisateur peut éditer la page
 		if (
-			$this->getUser('password') === $this->getInput('ZWII_USER_PASSWORD')
+			$this->isConnected() === true
 			&& $this->getUser('group') >= self::GROUP_EDITOR
 			&& $this->getUrl(1) !== 'force'
 		) {