A computer implemented method to prevent attacks against user authentication, the method comprising: - receiving, by a first server, from a user, a request to be logged into a service of said first server, said request including the provision of identification information validating the identity of the user in the first server; and - authenticating, by said first server, said identification information of said user in order to authorize said service logging request, characterized in that the method comprises: - using a second server, in connection with a computing device of the user, via a dedicated program installed in the user computing device, to manage a status of the accounts the user has in the first server, wherein said status of the accounts being set as valid or as invalid by the user via the dedicated program and stored in a memory of the second server, after a secured channel between the second server and the computing device is defined, and wherein said secured channel being defined after a credential exchange between the second server and the user is made; - receiving, by the second server, from said first server a request about a status regarding an account of the user in the first server; - in response to receiving the request, initializing, by the second server, a credential exchange with the first server in order to provide mutual authentication, the credential exchange being performed via an authentication procedure based on certificates' exchange between the first server and the second server; - verifying, by the second server, said account status; and - sending, by the second server, said account status to the first server, the latter using the received account status for authorizing said service logging request if said account status is set as valid or rejecting said service logging request if said account status is set as invalid. - receiving, by a first server, from a user, a request to be logged into a service of said first server, said request including the provision of identification information validating the identity of the user in the first server; and - authenticating, by said first server, said identification information of said user in order to authorize said service logging request, - using a second server, in connection with a computing device of the user, via a dedicated program installed in the user computing device, to manage a status of the accounts the user has in the first server, - receiving, by the second server, from said first server a request about a status regarding an account of the user in the first server; - in response to receiving the request, initializing, by the second server, a credential exchange with the first server in order to provide mutual authentication, the credential exchange being performed via an authentication procedure based on certificates' exchange between the first server and the second server; - verifying, by the second server, said account status; and - sending, by the second server, said account status to the first server, the latter using the received account status for authorizing said service logging request if said account status is set as valid or rejecting said service logging request if said account status is set as invalid.