Update 0.12.0: Security and privacy, Lyceum

Updated

The second factor moves to a new phone in one step, a log shows who changed what, and abandoned purchases clear away their data.

New:

Moving the second factor:

  • When you change phones, you move the second factor to the new device in one step with your password, without switching it off in between. The new one only takes effect after a confirmed code; until then the app and recovery codes keep working.

Reset by the owner:

  • Anyone who loses both device and recovery codes can have the owner reset their second factor in account management. The account is signed out everywhere and the person receives a warning email.

Who changed what:

  • The log in the settings shows who changed prices, roles, courses, legal texts and refunds, and when, in the same words the interface uses.

Secrets stay encrypted:

  • Secret settings such as the password for your mailbox are now stored encrypted everywhere.

Abandoned purchases tidy up:

  • If a checkout goes 24 hours without payment, the order is closed and the password chosen there and the IP address of the consent are deleted. Anyone returning later gets a fresh checkout.