Mirrors/gotosocial
1
0
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial.git synced 2024-11-01 06:50:00 +00:00
Code Issues Projects Releases Packages Wiki Activity
gotosocial/docs/user_guide/password_management.md
tobi 4c60a142f8
[docs] Add user settings panel docs, other small updates (#768) 
* add more links to markdown section

* update password management

* add user settings panel documentation

* move the user guide higher up in the docs
2022-08-26 17:40:54 +02:00

1.5 KiB
Raw Blame History

Password Management

Change Your Password

You can use the User Settings Panel to change your password. Just log in to the user panel, scroll to the bottom of the page, and input your old password and desired new password.

If the new password you provide is not long/complicated enough, you will see an error and be prompted to try again with a different password.

If your instance uses OIDC (ie., you log in via Google or some other external provider), you will have to change your password via your OIDC provider, not through the user settings panel.

Password Storage

GoToSocial stores hashes of user passwords in its database using the secure bcrypt function in the Go standard libraries.

This means that the plaintext value of your password is safe even if the database of your GoToSocial instance is compromised. It also means that your instance admin does not have access to your password.

To check whether a password is sufficiently secure before accepting it, GoToSocial uses this library with entropy set to 60. This means that passwords like password are rejected, but something like verylongandsecurepasswordhahaha would be accepted, even without special characters/upper+lowercase etc.

We recommend following the EFF's guidelines on creating strong passwords.