Account Update

On TBD, NMRhub will switch over to requiring Two factor authentication. This will require setting up an authenticator and setting recovery questions.

Update process

When logging in to website after update, you will receive a notification to check your institution email

Look for email similar to

Hello <user>,

NMRbox is moving to a new account system, and your account needs a few minutes of your

attention before you can sign in again. Nothing has gone wrong, and you have not been

locked out -- but this has to be done before the changeover, or you will lose access to

NMRbox, including SSH and VNC.

Use this link to finish setting up your account:

https://nmrhub.org/forgot-password/<long string>

It will walk you through whatever is still outstanding: setting a password, choosing two

security questions, and setting up an authenticator app for two-factor sign-in. Have your

phone to hand -- you will need to install an authenticator app if you do not already have

one. The link is good for 24 hours; if it expires, just start signing in again and we

will send you a fresh one.

If you have any trouble, reply to this message or write to

support@nmrbox.org and we will help you through it.

— The NMRbox team

If you've completed any of the following three steps, it will automatically be skipped if you resume this process again later.

Password

Following the link, you will likely be prompted to set a new password (unless you have recently changed your password). f your old password meets our complexity rules, you can continue using it, but you must still go through this process to set it again. This is required as we are migrating to a new user management system and cannot automatically migrate your existing password.

Security questions

After setting your password (if required), complete security questions:

OTP QR code

You will then be prompted to add a QR (quick-response) code to your authenticator app and verify the code it returns.

Logging in

Finally, you'll be taken to the logon page for the website and Opensearch Dashboards.

While you can save your password in a password manager, the OTP will change and will need to entered.

As long as you are using the same browser on the same machine, website logon will only be needed periodically.