Strengthening password security
Why ? To improve security when accessing tools, and in respect of GDPR guidelines, it is necessary to strengthen password management on the platform.
Where ? On the administration tool, and the pro tools (B2B solution, back-office, tariff management).
How ? The way in which user passwords are managed has been reviewed in the administration tool. Here are the key changes :
- Passwords are no longer visible in user profiles, including administrator profiles.

- The forgotten password recovery process has been strengthened. An email containing a secure link will now be sent to the user’s email address, where they can then set up a new password. The link can only be used once and for a limited time. This email can be triggered by the users themselves on the login page (‘forgotten password’) or by an administrator on the administration tool (‘send an email to (re)set the password’).

- Changing user login details, email addresses and passwords on the administration tool cannot be carried out without knowing the password.

- The ‘strength’ of new passwords will now be controlled. They should contain at least 10 characters, including upper case letters, lower case letters, numbers and special characters.

Furthermore, passwords for FTP accounts as set when exporting from the ‘configuration’ section have been hidden.



