Every person who needs access to Chameleon to Chameleon has a user account and credentials, including a User Name and Password.
When you are signed into Chameleon, you can manage your own password and review logs of all of your activity in the system.
| Note | ||
|---|---|---|
| ||
| Info | ||
Passwords are NOT set in Chameleon in Chameleon if the user is configured to use either of
|
Change My Password
| Anchor | ||||
|---|---|---|---|---|
|
...
This only applies if you are using the default username and password authentication and not LDAP or Google.
Enter a new Password in the field.
Confirm the password by entering it again.
Click the Update Password button. The next time you sign in to Chameleon, use your new password.
| Info |
|---|
| Note |
Your system is only as secure as the passwords for your user accounts. It is highly recommended that you use strong passwords for all Chameleon all Chameleon user accounts. The strongest passwords include a long combination of letters, numbers, uppercase, lowercase, symbols, and other special characters that haven’t been used as a password before. |
Forgotten Password
In the event you have forgotten your password a System Administrator can reset the create a new password for you from within Chameleon. You can then login with that new password and change it to one only you know.
From within User ControlSystem Tools - Users, the System Administrator should edit the user who needs the password change.
Once the Edit User dialog is open, near the bottom they can change the User Password and Confirm it. Press the Save Now > button to confirm the password change.
| Note |
|---|
Bannister Lake support can not retrieve a forgotten or lost password. Only However your System Administrator can reset a password for you. |
Common Password Checking
Flow includes a list of 1,000,000 common passwords. It checks the password you enter as you type to see if it matches any in that list. If it does you get a warning.
Example: "Warning: This is a common password."
...
| Info |
|---|
This list of common passwords is stored with the Chameleon Flow installation and may be updated by future versions. |
Data Breach Checking - HIBP
A second layer of password checking can also occur when you save your password. The password will be checked against a database on known breaches provided by a well known service: https://haveibeenpwned.com/Passwords
Your password is not sent to the service. Instead your password is protected by the process that requests possible matches from the service which are then checked against your password locally.
If your password is found it will give you a warning to encourage you to choose a new password.
Example: "PLEASE NOTE: Your password has been seen 43,442 times in public data breaches. You may wish to consider using a unique password."
...
| Info |
|---|
This check is done by requesting data from the publicly available internet service and thus requires internet access from the Flow server to work. |
Related Preference Setting
...