A method comprising: by a computing device, receiving a login request from a client device of a user; by the computing device, in response to the login request, generating a first identifier and a first derivative identifier, wherein the first derivative identifier is generated by applying a function to the first identifier; by the computing device, sending the first identifier and the first derivative identifier to the client device for storage; by the computing device, receiving a content request from the client device for a web page, wherein the content request comprises a second identifier; characterized in, by the computing device, in response to the content request, generating a second derivative identifier by applying the function to the second identifier; and by the computing device, providing a content frame and a trusted frame for display on the client device, wherein the content frame comprises the second derivative identifier; wherein the first identifier is stored in a location accessible by the content frame and the first derivative identifier is stored in a location accessible by the trusted frame and not accessible by the content frame; wherein the content frame is configured to: request the trusted frame to verify whether the second derivative identifier matches the first derivative identifier; and display the requested web page upon receiving a verification confirmation from the trusted frame; wherein the trusted frame is configured to: access the first derivative identifier stored in the location accessible by the trusted frame; and verify that the second derivative identifier received from the content frame matches the first derivative identifier; wherein the trusted frame is associated with a first origin and the content frame is associated with a second origin different from the first origin; and wherein the first origin and the second origin have the same domain. by a computing device, receiving a login request from a client device of a user; by the computing device, in response to the login request, generating a first identifier and a first derivative identifier, wherein the first derivative identifier is generated by applying a function to the first identifier; by the computing device, sending the first identifier and the first derivative identifier to the client device for storage; by the computing device, receiving a content request from the client device for a web page, wherein the content request comprises a second identifier; by the computing device, in response to the content request, generating a second derivative identifier by applying the function to the second identifier; and by the computing device, providing a content frame and a trusted frame for display on the client device, wherein the content frame comprises the second derivative identifier; wherein the first identifier is stored in a location accessible by the content frame and the first derivative identifier is stored in a location accessible by the trusted frame and not accessible by the content frame; wherein the content frame is configured to: request the trusted frame to verify whether the second derivative identifier matches the first derivative identifier; and display the requested web page upon receiving a verification confirmation from the trusted frame; request the trusted frame to verify whether the second derivative identifier matches the first derivative identifier; and display the requested web page upon receiving a verification confirmation from the trusted frame; wherein the trusted frame is configured to: access the first derivative identifier stored in the location accessible by the trusted frame; and verify that the second derivative identifier received from the content frame matches the first derivative identifier; access the first derivative identifier stored in the location accessible by the trusted frame; and verify that the second derivative identifier received from the content frame matches the first derivative identifier; wherein the trusted frame is associated with a first origin and the content frame is associated with a second origin different from the first origin; and wherein the first origin and the second origin have the same domain.