{"id":5280,"date":"2018-12-10T10:41:51","date_gmt":"2018-12-10T10:41:51","guid":{"rendered":"https:\/\/nextcloud.com\/?p=5280"},"modified":"2024-01-26T14:48:45","modified_gmt":"2024-01-26T13:48:45","slug":"next-generation-2-factor-authentication-and-security-hardening","status":"publish","type":"post","link":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/","title":{"rendered":"Next generation 2-factor authentication and security hardening"},"content":{"rendered":"

\"\"
\nToday, Nextcloud 15 has been made available.<\/a> As there is so much new and improved in this release, we have dedicated separate blogs to each main area of improvement. This blog covers our work in the area of security hardening and new security capabilities.<\/p>\n

Download now!<\/a><\/div>\n

\"\"<\/p>\n

Next generation 2-factor authentication<\/h2>\n

Security continues to be a key concern for Nextcloud users. To improve the protection of Nextcloud servers, this release enables administrators to control and enforce two-factor authentication globally or on a group-by-group base. New are also one-time codes for system administrators, to be used when the 2nd factor is unavailable.<\/p>\n

All users will be warned to generate their one-time codes as soon as possible and store them somewhere safe. Administrators have command-line control over 2FA, in case they or users are locked out of their account.<\/p>\n

\"\"<\/p>\n

To lower the effort of using the second factor for secure authentication, notifications from devices already authenticated can be used as second factor. This way, a mobile device can approve authentication in a browser, or the desktop client can approve authentication on a phone. The user simply gets a notification and can approve it.<\/p>\n

\"\"<\/a><\/p>\n

\n
\n\"\"<\/a> Receiving a notification on iPad<\/small>\n<\/div>\n
\n\"\"<\/a> Receiving a notification on Android<\/small>\n<\/div>\n
\n\"\"<\/a> Simply tap approve<\/em> to log in<\/small>\n<\/div>\n<\/div>\n

Further hardening of Nextcloud<\/h2>\n

To harden Nextcloud further, this release brings more strict CSP (Content Security Policy) rules providing even deeper protection from Cross-Site Scripting vulnerabilities. The third generation of our App tokens improves handling on external password change. This reduces the number of times users have to re-authorize their client applications as the clients can get re-authorized automatically, provided one of the users’ logins is valid.<\/p>\n

\n\"\"<\/a> Manage app tokens in Nextcloud\n<\/div>\n

Details on CSP and App Token V3<\/h4>\n

Our CSP no longer by default allows\u00a0unsafe-eval<\/code>. This blocks the javascript eval function. Developers can effectively no longer
\ninterpret text as instructions. you could do<\/p>\n

eval('alert(1)')\n<\/code><\/pre>\n
And it would just work. Now it no longer does. This means app developers will have to update their app and keep this limitation in mind. But code injection attacks by a hacker become significantly harder with our stricter CSP.
\nOver the last 2 years, our App Token technology evolved from app tokens which were invalidated whenever the user changed their password (V1) to public key app tokens that would be updated on password change (V2). V3 is adapted to work with LDAP or other external authentication mechanisms. While we still can’t update app tokens when you change your LDAP password, upon the first login in the web or any client, all app tokens are updated.<\/p>\n","protected":false},"excerpt":{"rendered":"
Today, Nextcloud 15 has been made available. As there is so much new and improved in this release, we have dedicated separate blogs to each main area of improvement. This blog covers our work in the area of security hardening and new security capabilities. Download now! Next generation 2-factor authentication Security continues to be a […]<\/p>\n","protected":false},"author":2,"featured_media":1423,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"publish_to_discourse":"1","publish_post_category":"22","wpdc_auto_publish_overridden":"","wpdc_topic_tags":"","wpdc_pin_topic":"","wpdc_pin_until":"","discourse_post_id":"126594","discourse_permalink":"https:\/\/help.nextcloud.com\/t\/next-generation-2-factor-authentication-and-security-hardening\/42888","wpdc_publishing_response":"success","wpdc_publishing_error":"","footnotes":""},"categories":[7],"tags":[],"class_list":["post-5280","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"yoast_head":"\nNext generation 2-factor authentication and security hardening - Nextcloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Next generation 2-factor authentication and security hardening - Nextcloud\" \/>\n<meta property=\"og:description\" content=\"Today, Nextcloud 15 has been made available. As there is so much new and improved in this release, we have dedicated separate blogs to each main area of improvement. This blog covers our work in the area of security hardening and new security capabilities. Download now! Next generation 2-factor authentication Security continues to be a […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/\" \/>\n<meta property=\"og:site_name\" content=\"Nextcloud\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Nextclouders\/\" \/>\n<meta property=\"article:published_time\" content=\"2018-12-10T10:41:51+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-01-26T13:48:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jos Poortvliet\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@nextclouders\" \/>\n<meta name=\"twitter:site\" content=\"@nextclouders\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jos Poortvliet\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/\"},\"author\":{\"name\":\"Jos Poortvliet\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2\"},\"headline\":\"Next generation 2-factor authentication and security hardening\",\"datePublished\":\"2018-12-10T10:41:51+00:00\",\"dateModified\":\"2024-01-26T13:48:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/\"},\"wordCount\":432,\"publisher\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/#organization\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg\",\"articleSection\":[\"News\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/\",\"url\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/\",\"name\":\"Next generation 2-factor authentication and security hardening - Nextcloud\",\"isPartOf\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg\",\"datePublished\":\"2018-12-10T10:41:51+00:00\",\"dateModified\":\"2024-01-26T13:48:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#primaryimage\",\"url\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg\",\"contentUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"Jos Poortvliet\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nextcloud.com\/fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Next generation 2-factor authentication and security hardening\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#website\",\"url\":\"https:\/\/nextcloud.com\/fr\/\",\"name\":\"Nextcloud\",\"description\":\"Regain control over your data\",\"publisher\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nextcloud.com\/fr\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#organization\",\"name\":\"Nextcloud\",\"url\":\"https:\/\/nextcloud.com\/fr\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg\",\"contentUrl\":\"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Nextcloud\"},\"image\":{\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/Nextclouders\/\",\"https:\/\/x.com\/nextclouders\",\"https:\/\/www.linkedin.com\/company\/10827569\/\",\"https:\/\/youtube.com\/nextcloud\",\"https:\/\/www.instagram.com\/nextclouders\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2\",\"name\":\"Jos Poortvliet\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g\",\"caption\":\"Jos Poortvliet\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Next generation 2-factor authentication and security hardening - Nextcloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/","og_locale":"fr_FR","og_type":"article","og_title":"Next generation 2-factor authentication and security hardening - Nextcloud","og_description":"Today, Nextcloud 15 has been made available. As there is so much new and improved in this release, we have dedicated separate blogs to each main area of improvement. This blog covers our work in the area of security hardening and new security capabilities. Download now! Next generation 2-factor authentication Security continues to be a […]","og_url":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/","og_site_name":"Nextcloud","article_publisher":"https:\/\/www.facebook.com\/Nextclouders\/","article_published_time":"2018-12-10T10:41:51+00:00","article_modified_time":"2024-01-26T13:48:45+00:00","og_image":[{"width":1000,"height":1000,"url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","type":"image\/jpeg"}],"author":"Jos Poortvliet","twitter_card":"summary_large_image","twitter_creator":"@nextclouders","twitter_site":"@nextclouders","twitter_misc":{"\u00c9crit par":"Jos Poortvliet","Dur\u00e9e de lecture estim\u00e9e":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#article","isPartOf":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/"},"author":{"name":"Jos Poortvliet","@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2"},"headline":"Next generation 2-factor authentication and security hardening","datePublished":"2018-12-10T10:41:51+00:00","dateModified":"2024-01-26T13:48:45+00:00","mainEntityOfPage":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/"},"wordCount":432,"publisher":{"@id":"https:\/\/nextcloud.com\/fr\/#organization"},"image":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","articleSection":["News"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/","url":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/","name":"Next generation 2-factor authentication and security hardening - Nextcloud","isPartOf":{"@id":"https:\/\/nextcloud.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#primaryimage"},"image":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#primaryimage"},"thumbnailUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","datePublished":"2018-12-10T10:41:51+00:00","dateModified":"2024-01-26T13:48:45+00:00","breadcrumb":{"@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#primaryimage","url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","contentUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","width":1000,"height":1000,"caption":"Jos Poortvliet"},{"@type":"BreadcrumbList","@id":"https:\/\/nextcloud.com\/fr\/blog\/next-generation-2-factor-authentication-and-security-hardening\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nextcloud.com\/fr\/"},{"@type":"ListItem","position":2,"name":"Next generation 2-factor authentication and security hardening"}]},{"@type":"WebSite","@id":"https:\/\/nextcloud.com\/fr\/#website","url":"https:\/\/nextcloud.com\/fr\/","name":"Nextcloud","description":"Regain control over your data","publisher":{"@id":"https:\/\/nextcloud.com\/fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nextcloud.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/nextcloud.com\/fr\/#organization","name":"Nextcloud","url":"https:\/\/nextcloud.com\/fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","contentUrl":"https:\/\/nextcloud.com\/c\/uploads\/2022\/10\/nextcloud-logo-blue-transparent.svg","width":"1024","height":"1024","caption":"Nextcloud"},"image":{"@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Nextclouders\/","https:\/\/x.com\/nextclouders","https:\/\/www.linkedin.com\/company\/10827569\/","https:\/\/youtube.com\/nextcloud","https:\/\/www.instagram.com\/nextclouders\/"]},{"@type":"Person","@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/c3c1a52fbc1c6a2be2f1df8818daa8c2","name":"Jos Poortvliet","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/nextcloud.com\/fr\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1c6de64891ee8c4902e1ac198f26ea5fb202d8bbaa7bce35b6a184610bbe4a3d?s=96&d=mm&r=g","caption":"Jos Poortvliet"}}]}},"featured_media_url":"https:\/\/nextcloud.com\/c\/uploads\/2022\/03\/jos.jpg","_links":{"self":[{"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/posts\/5280","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/comments?post=5280"}],"version-history":[{"count":0,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/posts\/5280\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/media\/1423"}],"wp:attachment":[{"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/media?parent=5280"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/categories?post=5280"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nextcloud.com\/fr\/wp-json\/wp\/v2\/tags?post=5280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}