Hello,
The most common support request is to reset BitFolk account
password. I have therefore implemented a password reset feature to
the web panel at
https://panle.bitfolk.com/.
It works as you would expect:
- Someone follows the "reset password" link on the login screen.
- They are invited to put in an account name. If the account exists
and reset is enabled for that account, then an email is generated
with an authorisation key in it. The email is sent to the email
address on record for that account.
The email also contains the IP address of the client that
requested the reset, together with their browser's user agent and
the time stamp.
- Following the link in the email within 12 hours will randomly
generate a new password. Nothing will happen if the link is not
followed.
When this was last discussed, there were a few people who didn't
like the idea of their passwords being able to be reset by email and
potentially being exposed to an attacker who already has control of
their email account. Therefore I have also added the option to
disable the feature.
I will put the feature live on Wednesday 27th January, so if you
don't like the idea of the above being possible please go to
https://panel.bitfolk.com/account/security/ and disable it.
In the near future I shall also add a third option for PGP encrypted
emails, which should allay most people's concerns about that
feature, but I am keen to get a basic version of this deployed
before the weekend of 6th February as I'll be at FOSDEM and support
will be emergencies only.
Clearly forms to change other personal details such as email
and postal addresses are also required, and also will be coming
soon.
On the security link above you will also find a password change
form for those who prefer a web page vs. logging in to the Xen Shell
and typing "passwd".
As always I'm keen to hear what people's priorities are for other
features to be added to the panel. I'm also open to ideas about
software for managing such feature requests, as RT probably isn't
best suited to it.
Cheers,
Andy
--
http://bitfolk.com/ -- No-nonsense VPS hosting
"Whoever is responsible for this stunning design failure deserves continuous
cockpunches." -- jwz