Published
The office logo in the panel, and a tidier sign-in
The panel now shows the office logo, and at first sign-in the system asks for the temporary password to be changed and confirms the change in words.
Until now the panel showed the office name as text. It now shows the logo — in the panel header and on the sign-in screen, that is before anyone has signed in. No logo means the text name stays, and nothing changes for an office already at work. The height has a ceiling so that a wide file cannot push the menu aside; the width is left to the browser, following the proportions of the file.
This is the first step of making the panel look like your office. We put the logo in place when the office is connected; an upload screen in the settings is the next step, and the office accent colour comes after it.
Sign-in was tried out on a real office, and three fixes came from it. A temporary password does not stay temporary: at first sign-in the other screens are closed until it is changed, and the screen says why — the password issued when the account was created is known to whoever created it. A new password identical to the current one is not accepted, the length is at least twelve characters, it must contain both letters and digits, and passwords known to have leaked are rejected.
The confirmation is visible. The message that the password has been saved sits on the page itself, as the first block above the form, rather than vanishing from a corner after three seconds: it names the date and time of the change and says to use the new password next time. The system also keeps the time of the last sign-in and the time of the password change; successful and failed sign-in attempts go to the access log — the e-mail address from an attempt is not written there — and frequent attempts are limited per account and address.
Two-factor protection in Hebrew, right to left. Every second-factor screen has been translated: signing in with a code, the initial set-up, the profile page and the recovery code windows. The code cells run left to right, the way digits are read, so a six-digit code is entered in the order you see on screen; the cells themselves are thicker and easier to make out, and they can be filled from the keyboard alone. In the library the panel is built on, this whole set of screens was not translated at all — that is, precisely in the product's main language.
None of this makes signing in impregnable, and we are not claiming it does. The point is simpler: a temporary password does not live forever, whoever changed it can see the change was accepted, and a sign-in leaves a trace.
Want to see this on your own office's inquiries?