mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
25 lines
2.3 KiB
Markdown
25 lines
2.3 KiB
Markdown
# Security Guidelines 🛡️
|
|
|
|
Infinito.Nexus is designed with security in mind. However, while following our guidelines can greatly improve your system's security, no IT system can be 100% secure. Please report any vulnerabilities as soon as possible.
|
|
|
|
If you discover a security vulnerability in Infinito.Nexus, you MUST report it through [SECURITY.md](../../SECURITY.md). You MUST NOT open a public issue for security reports.
|
|
|
|
For optimal personal security, we RECOMMEND the following:
|
|
|
|
- **Use a Password Manager**
|
|
You SHOULD use a reliable password manager such as [KeePassXC](https://keepassxc.org/) 🔐. (Learn more about [password managers](https://en.wikipedia.org/wiki/Password_manager) on Wikipedia.) KeePassXC is available for both smartphones and PCs, and it can automatically generate strong, random passwords.
|
|
|
|
- **Enable Two-Factor Authentication (2FA)**
|
|
You MUST enable 2FA whenever possible. Many password managers (like KeePassXC) can generate [TOTP](https://en.wikipedia.org/wiki/Time-based_One-Time_Password) tokens, adding an extra layer of security even if your password is compromised.
|
|
Synchronize your password database across devices using the [Nextcloud Client](https://nextcloud.com/) 📱💻.
|
|
|
|
- **Use Encrypted Systems**
|
|
You SHOULD run Infinito.Nexus only on systems with full disk encryption. For example, Linux distributions such as [Manjaro](https://manjaro.org/) (based on ArchLinux) with desktop environments like [GNOME](https://en.wikipedia.org/wiki/GNOME) provide excellent security. (Learn more about [disk encryption](https://en.wikipedia.org/wiki/Disk_encryption) on Wikipedia.)
|
|
|
|
- **Beware of Phishing and Social Engineering**
|
|
You MUST verify email senders, avoid clicking on unknown links, and MUST NEVER share your passwords or 2FA codes with anyone. (Learn more about [Phishing](https://en.wikipedia.org/wiki/Phishing) and [Social Engineering](https://en.wikipedia.org/wiki/Social_engineering_(security)) on Wikipedia.)
|
|
|
|
Following these guidelines will significantly enhance your personal security. No system is completely immune to risk.
|
|
|
|
For a tutorial on setting up secure password management, see [here](https://blog.veen.world/blog/2025/04/04/%f0%9f%9b%a1%ef%b8%8f-keepassxc-cymais-cloud-the-ultimate-guide-to-cross-device-password-security/).
|