Security and SSL

Your portal only opens over HTTPS, at https://your-name.lizpack.com. An address typed with http:// is redirected to https://. Traffic between your visitors and the portal is therefore encrypted, maps and credentials included.

The certificate is issued by Let's Encrypt when the instance is deployed, then renewed by us before it expires. You have nothing to install or monitor.

Connections to databases

QGIS Desktop, pgAdmin or psql connect directly to the database, without going through the portal. The database server accepts encryption: request it in your software by choosing the SSL mode require. The connection settings are on the instance page for the instance database, and on the Databases page for a dedicated database.

The security of your data is shared between what we handle and what you decide. Here is each side.

Once two-factor authentication is on, your password is no longer enough to enter the client area: each sign-in also asks for a 6-digit code, sent to your account's address. Someone who had your password stays outside.

1. Open Settings, then the Security & privacy card.
2. In the Two-factor authentication box, click Enable two-factor authentication. A code is sent to your address.
3. Enter it in Verification code, then click Confirm. The badge switches to Enabled.

Signing in

After your address and password, the Two-step verification screen tells you which address the code was sent to. Type or paste the code: the form submits itself at the sixth digit. The code is valid for 10 minutes and allows 5 attempts. Beyond that, or if it does not arrive, Send a new code sends a new one, one minute after the previous; the old one then stops working.

Turning it off

On the same page, Deactivate asks for your Current password, then Confirm disabling. Signing in becomes possible with the password alone again.

The activity log keeps track of what was done from your account. Open your account menu, top right, then My activity. The same menu shows the latest actions under Recent activity, and See all leads to the full log.

Each line gives the action, its result, the IP address it came from and its date. You will find actions on your instances (deployment, start, stop, update, deletion), file uploads and deletions, subscription and invoices, licences, the team, dedicated databases, password and profile changes, as well as the pages viewed.

The search covers the action and the IP address. All, Success and Errors sort by result: an error is an action that was refused or did not complete. Show sets how many recent actions are loaded, from 100 to 10,000; they are read in pages of 20.

The log only shows your own actions. Each member of your team has their own: what they do on your account appears in their log, not in yours. Entries are not erased over time.