Passwords and MFA
Password change
Section titled “Password change”What it is for. It lets users change their own password.
When to use it. To update your account password.
How to open it. From the user menu (on every page).
What it shows and how to use it. The fields for the new password with confirmation; requirement validation.
What happens next. The password is updated; no password is ever sent by email in clear text.
Notes. Only the user sets passwords.
MFA Setup
Section titled “MFA Setup”What it is for. It turns on/manages multi-factor authentication for the account.
When to use it. At the first MFA setup or to regenerate the second factor.
How to open it. From the user menu / at first sign-in if MFA is mandatory.
What it shows and how to use it. The QR code to scan with the authenticator app and the field for the 6-digit verification code.
What happens next. At later sign-ins the TOTP code is required.
Notes. The QR code is generated on the client side.