2.3 KiB
Security Guidelines 🛡️
Infinito.Nexus is designed with security in mind. However, while following our guidelines can greatly improve your system's security, no IT system can be 100% secure. Please report any vulnerabilities as soon as possible.
If you discover a security vulnerability in Infinito.Nexus, you MUST report it through SECURITY.md. You MUST NOT open a public issue for security reports.
For optimal personal security, we RECOMMEND the following:
-
Use a Password Manager You SHOULD use a reliable password manager such as KeePassXC 🔐. (Learn more about password managers on Wikipedia.) KeePassXC is available for both smartphones and PCs, and it can automatically generate strong, random passwords.
-
Enable Two-Factor Authentication (2FA) You MUST enable 2FA whenever possible. Many password managers (like KeePassXC) can generate TOTP tokens, adding an extra layer of security even if your password is compromised. Synchronize your password database across devices using the Nextcloud Client 📱💻.
-
Use Encrypted Systems You SHOULD run Infinito.Nexus only on systems with full disk encryption. For example, Linux distributions such as Manjaro (based on ArchLinux) with desktop environments like GNOME provide excellent security. (Learn more about disk encryption on Wikipedia.)
-
Beware of Phishing and Social Engineering You MUST verify email senders, avoid clicking on unknown links, and MUST NEVER share your passwords or 2FA codes with anyone. (Learn more about Phishing and Social Engineering on Wikipedia.)
Following these guidelines will significantly enhance your personal security. No system is completely immune to risk.
For a tutorial on setting up secure password management, see here.