search

Infisical / infisical

♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
https://infisical.com
Other
15.2k stars 880 forks source link

Require the user to type a confirmation code from the Emergency Kit PDF to complete signup flow #521

Open CONIGUERO opened 1 year ago

CONIGUERO commented 1 year ago

Feature description

A unique confirmation code (maybe a 6-digit one, maybe alphanumeric, can be decided later) should be generated and inserted into the Emergency Kit PDF as a new value alongside the 3 others (Sign-in URL, email address, secret key)

The user should then be required to type that value on a text field below the PDF download button, as a "Step 2" kind of thing, in order to complete the registration flow and access their account.

Why would it be useful?

It would ensure users have successfully downloaded the Emergency Kit PDF and can open it without errors (corruption/bit flips, while rare, can happen during the generation time!) It also enforces the clear understanding of the Kit's importance to the user by requiring affirmative effort on their part, such as opening the file and reading all the other instructions for safe storage of the document, before getting to read the actual code.

dangtony98 commented 1 year ago

Thanks @CONIGUERO for this great idea — Definitely adding this to our TODO list.