Under Settings → User Account → Account Security you manage your password and two-factor authentication (2FA).
Changing your password
Change password redirects you to the protected page of the identity service, where you may need to confirm your current password again. You then choose a new one.
Setting up two-factor authentication
With 2FA active, access to your case file is only possible with your password and a code generated fresh each time — produced by an authenticator app on your smartphone.
Which app you need
You need a free authenticator app that supports the widely used TOTP standard. The most common and recommended options:
Both work identically and are equally suitable — install one of them from the App Store (iPhone) or the Google Play Store (Android) before you start setup in DEPLAW.
How to set up 2FA
- Install an authenticator app
Download Google Authenticator or Microsoft Authenticator from the App Store or Play Store, if you haven't already.
- Click Set up
Under Account Security, click Set up. You're redirected to the security screen of the identity service (Keycloak) and may need to sign in again there.
- Scan the QR code with the app
The screen shows a QR code. In the authenticator app, tap "+" or "Add account" and point the camera at the QR code — the app recognizes it automatically and creates a new entry for DEPLAW. (If the camera doesn't work, both apps also offer manual entry of a displayed key.)
- Enter the confirmation code
The app immediately shows a 6-digit code that changes every 30 seconds. Enter this current code in the confirmation field to complete setup.
- From now on, at every login
After entering your password, DEPLAW also asks for the code currently shown in the app — simply read it off and enter it.
Why a second factor makes sense
| Benefit | Meaning |
|---|---|
| Protection if your password is stolen | Even if someone knows your password (e.g. from a data leak at another service), the second factor is missing — access remains denied. |
| Protection of your email account | Even someone with access to your inbox who tries to reset your password can’t get in without the second factor. |
| Works without internet or SMS | The app generates codes locally on your smartphone — no waiting for an SMS, no cost, and it works abroad or without cell coverage. |
| Recommended for sensitive data | Strongly recommended whenever, for example, health or financial data is stored in case files. |
Recommendations for a secure password
A strong password is the foundation of every account’s security. The following guideline has proven effective:
| Recommendation | Why |
|---|---|
| At least 12 characters | Length is the most effective way to make brute-force guessing harder. |
| Mix upper/lowercase letters, digits & special characters | increases variety and thus strength. |
| Never reuse it | use a password that’s unique to DEPLAW — not used anywhere else. |
| Use a password manager | generates and stores long random passwords so you don’t have to remember any. |
| No connection to personal data | no names, birthdays, firm names, or similar. |
| Change it immediately if in doubt | if a password may have become known, renew it right away via “Change password”. |