Common to All Users¶
Users could login by accessing the
Access the User Preferences¶
After login Users could access their preferences by clicking the
Preferences link present in the login status bar.
Change Your Password¶
Users could change their own password by accessing the
Password tab present in the
Reset Your Password¶
Users could requests a password reset via the
/#/login page by clicking the
Forgot password? button.
After clicking the button users are requested to type their own username or email address.
Enable Two-Factor-Authentication (2FA)¶
Users could enable Two-Factor-Authentication by clicking the
Enable two factor authentication option inside the
To enable the feature the user requires to have a phone with installed a common
Authenticator APP implementing the TOTP standard as by RFC 6238
Access and Save Your Account Recovery Key¶
Users could access their own Account Recovery key by clicking the
Account Recovery Key button present in the
This is a fundamental step that any user should do at their first login after activating their own account in order to backup their own account recovery key and get sure to not incur in data loss due to password loss.
Load a Public PGP Key¶
GlobaLeaks implements by default an advanced and automatic Encryption Protocol that uses online keys.
Users have the optional possibility to load a personal
Public PGP Key by uploading or pasting the key on their
When a PGP key is loaded onto the platform any file uploaded on the platform and email notification sent by the platform is encrypted with it. This is an optional additional measure of security that should be evaluated and adopted in relation the threat model of the project.