Update SecurityManagement.md

Updated the security management page.
This commit is contained in:
pravin
2025-06-02 13:55:24 +05:30
committed by GitHub
parent 72a61bc621
commit e16c5e08a8
+45 -23
View File
@@ -7,55 +7,77 @@ title: Security Management
### ✅ Two-Factor Authentication (2FA)
Adds a second verification step when logging in.
Two-Factor Authentication (2FA) adds a second layer of security to your account by requiring **not just your password, but also a time-sensitive code** from a trusted device.
#### Benefits:
#### 🔐 What is 2FA?
- Enhances account protection
- Requires a time-based code from an app like Google Authenticator
#### How to Enable:
2FA combines **something you know** (your password) with **something you have** (like a smartphone or hardware token). This significantly reduces the risk of unauthorized access—even if someone has your password.
1. Go to **Preferences > Security > Setup 2FA**
2. Scan the QR Code with an authenticator app
3. Save recovery codes for backup
4. Enter the verification code to complete setup
#### 🛡️ Benefits:
> If 2FA is enabled, youll be prompted for a verification code after entering your password.
- Enhances account protection against phishing and brute-force attacks
- Reduces the risk of unauthorized access from compromised credentials
- Helps meet compliance requirements for security-conscious organizations
- Only the account owner with access to the authenticator app can log in
#### 📲 How to Enable:
1. Go to **Settings > Preferences > Security**
2. Click "Setup 2FA" button and scan the displayed QR code with an app like Google Authenticator, Authy, or Microsoft Authenticator.
3. Save the recovery codes in a secure location (they allow access if you lose your phone)
4. Enter the 6-digit verification code shown in your app to complete setup
> 🔁 The verification code refreshes every 30 seconds and is unique to your device.
> 🔐 If 2FA is enabled, you will be prompted for a verification code every time you log in.
#### 📹 Watch the Setup Tutorial:
[![how to setup 2fa](https://img.youtube.com/vi/cgVBBetnbO8/0.jpg)](https://www.youtube.com/watch?v=cgVBBetnbO8)
---
### 🛡️ Passkey Authentication
Passkeys offer **passwordless** and **phishing-resistant** sign-in.
Passkeys offer **passwordless**, **phishing-resistant**, and **device-bound** sign-in using modern authentication standards.
#### 🔐 Key Features:
#### 🔐 What Are Passkeys?
- Use fingerprint, Face ID, or device PIN
- Passwordless and secure
- Reduces credential theft risks
Passkeys are cryptographic credentials tied to your device and identity, replacing traditional passwords. Theyre based on **FIDO2/WebAuthn** standards and work using **public-private key encryption**, making them highly secure.
- Instead of typing passwords, you authenticate using biometrics (like Face ID or fingerprint) or a device PIN.
- A passkey is stored securely on your device and never shared—so even if attackers phish you, they cant steal your login info.
#### 💡 Key Features:
- Use **fingerprint**, **Face ID**, or **device PIN**
- **Passwordless** and **secure** authentication
- Resistant to **phishing** and **credential stuffing**
- Syncs across devices (when using platforms like iCloud Keychain or Google Password Manager)
- Fast, one-tap login experience
#### 🛠 How to Register a Passkey:
1. Go to **Preferences > Security**
1. Go to **Settings > Preferences > Security**
2. Click **Register passkey**
3. Your device prompts biometric or PIN-based authentication
4. On success, the passkey is saved and listed under **Your Passkeys**
[![how to setup passkey]()](https://www.youtube.com/embed/lLfcu9oSbew?si=yODZcEveYZSbQQXw)
> 📌 A passkey is unique to each device/browser combination. You can register multiple passkeys for different environments.
#### 📹 Watch the Setup Tutorial:
[![How to Setup Passkey](https://img.youtube.com/vi/lLfcu9oSbew/0.jpg)](https://www.youtube.com/embed/lLfcu9oSbew?si=yODZcEveYZSbQQXw)
#### 🧾 Managing Your Passkeys
##### ✏️ Rename:
Click the **pencil icon** to rename a passkey.
Click the **pencil icon** to rename a passkey for easy identification.
##### 🗑 Delete:
Click the **trash icon** to remove a passkey.
⚠️ This revokes access via that method.
⚠️ This revokes access via that method and may require alternate login or re-registration.
> 🔐 Tip: Register multiple passkeys on different devices for redundancy and ease of access.
---