More security: over 30 points reviewed and improved
I have reviewed stationeers.de thoroughly for security and improved over 30 points – from sign-in protection with warning emails and protection against spam links to safer server settings.
Over the last few days I have reviewed the website step by step for security. More than 30 points came together, and they are now improved. The most important ones for you:
- Better sign-in protection: anyone trying out passwords or two-factor codes is slowed down after several failed attempts and locked out for a while.
- 2FA protection with warning emails: if someone enters a wrong two-factor code after your correct password, you get an email – also when signing in with a code has been locked or there were unusually many failed attempts. If it was not you, best change your password right away.
- Confirmation with code: for important actions such as the data export or deleting your account, the site asks for your password and – if set up – your two-factor code as well.
- Protection against spam links: links to program files, link shorteners and imitated addresses no longer get into the forum, chat or messages. More in the news about moderation.
- Encrypted keys: access keys for connected services, for example for the chatbot, translation and the mailbox, are now only stored encrypted in the database.
- Safer headers: stricter rules on what the browser may load, less information about the server sent out and better protection of internal folders.
- Delete means delete: if you delete your account, all your tickets and contact requests are now removed completely as well.
You do not need to do anything. The best protection for your account is your own strong password and two-factor sign-in. If you still find a weakness, please report it confidentially to support@stationeers.de.
What is stored for this is described in the privacy policy.