Common to All Users¶
Access the User Preferences¶
After login Users could access their preferences by clicking the Preferences link present in the login status bar.
Change Your Password¶
Users could change their own password by accessing the Password tab present in the Preferences page.
Reset Your Password¶
Users could requests a password reset via the /#/login page by clicking the Forgot password? button.
After clicking the button users are requested to type their own username or email address.
Enable Two-Factor-Authentication (2FA)¶
Users could enable Two-Factor-Authentication by clicking the Enable two factor authentication option inside the Preferences page.
To enable the feature the user requires to have a phone with installed a common Authenticator APP implementing the TOTP standard as by RFC 6238
Access and Save Your Account Recovery Key¶
Users could access their own Account Recovery key by clicking the Account Recovery Key button present in the Preferences page.
This is a fundamental step that any user should do at their first login after activating their own account in order to backup their own account recovery key and get sure to not incur in data loss due to password loss.
Load a Public PGP Key¶
GlobaLeaks implements by default an advanced and automatic Encryption Protocol that uses online keys.
Users have the optional possibility to load a personal Public PGP Key by uploading or pasting the key on their Preferences page.
When a PGP key is loaded onto the platform any file uploaded on the platform and email notification sent by the platform is encrypted with it. This is an optional additional measure of security that should be evaluated and adopted in relation the threat model of the project.
