Editing Security and Privacy Settings
Changing your password, as well as managing your authentication method for accessing projects protected by 2FA (two factor authentication) are important security and privacy settings.
To edit your security and privacy settings, proceed as follows:
- Sign in to Drooms.
- Click on the bottom button (showing your first name) in the vertical main navigation tool bar on the left to open the Account panel.
- Click on ‘Manage your Drooms account’ to open the Account settings page in a separate browser tab, and select third option ‘Security and privacy settings’.
On the right you can manage following security and privacy settings:
- Change password
- Manage 2FA settings
Please note: The options for managing your 2FA access are only shown, once you have been invited to a project protected by two-factor authentication. 2FA is only required to sign in to specific projects, for which it was enabled upon request by the project owner, not for Drooms as such.
To change your password, proceed as follows:
- Click on ‘Change password’ to open the reset password settings page.
- Enter your current password.
- Enter your new password. Passwords must have:
- at least 10 characters, and:
-
at least one capital letter: A-Z
-
at least one lower case letter: a-z
-
at least one special character
-
at least one number: 0-9
-
Repeat your new password.
- Click on ‘Save new password’ (or ‘Cancel’ to return to the previous page).
To manage your settings for two-factor authentication (2FA), proceed as follows:
- You can choose your preferred 2FA method for signing in to projects protected by 2FA (optionally you can also remove an already selected verification method first):
- OTP verification with authenticator app (recommended): Your authenticator app (on tablet, mobile phone, or desktop) will generate the additional code needed when signing in. This is more secure than SMS verification.
- Click on ‘Setup’ to open the 2FA setup dialog with instructions and a QR code and alternatively a secret key
-
Download and install an authenticator app of your choice (e.g. Microsoft Authenticator, Google Authenticator, Authy)
-
Open the authenticator app and add a new account by scanning the displayed QR code or entering the secret key
- Enter the authentication code generated by the authenticator app (valid fifteen minutes)
- Click on ‘Submit’
- SMS verification: An SMS with the additional code needed when signing in will be sent to your mobile phone.
- Click on ‘setup’ to open the 2FA setup dialog with instructions
-
Add a mobile number
- Click on ‘Submit’
- Enter the authentication code sent to the provided number in the confirmation dialog that opened
- Click on ‘Submit’
- OTP verification with authenticator app (recommended): Your authenticator app (on tablet, mobile phone, or desktop) will generate the additional code needed when signing in. This is more secure than SMS verification.
- Please note: If you have not set up a 2FA method, yet, and try to sign in to a project protected by 2FA for the first time, you will be asked to setup your preferred 2FA method on the fly. You can later change it here.
- Please note: Make sure that you update your mobile phone number used for SMS verification when it changes.