Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Next challenges

Recent achievements

  • Global
  • Personal

Recognition

  • Give kudos
  • Received
  • Given

Leaderboard

  • Global

Trophy case

Kudos (beta program)

Kudos logo

You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.

View group

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Captcha in private mode

Hey,

why is the Captcha only for Public mode?

Our users need more comfort.

So I dont want to use Fail2Ban or 2FA.

At first a Captcha would be fine to fight against brute force attacks.
(Please let us not discuss what is more secure).

Basic question: Why is the Captcha only for Public mode? 

Cheers

1 answer

1 accepted

0 votes
Answer accepted

It's not.

Captcha is used in two places.:

If someone is signing up for a new account, in Public mode, Captcha is recommended to try to stop 'bots firing up malicious accounts.  You don't need it in private mode - your admins have to add people, and we generally have to assume that your admins know who they're adding and have already decided that they are humans.

If someone gets their password wrong too many times, they will be asked for a Captcha after a handful of wrongs.  The mode does not matter

Unfortunately, when you enable captcha for incorrect password attempts via "Maximum Authentication Attempts Allowed" setting. It opens Jira up for User Enumeration, as the captcha ONLY displays when invalid passwords occur for VALID users.
If you try to log in with an invalid user, the captcha never shows up.

Atlassian doesn't appear to care about this little bug.

Suggest an answer

Log in or Sign up to answer
TAGS

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you