Skip to content

Commit

Permalink
Clarify initialization of KeePassX database on Journalist Workstation
Browse files Browse the repository at this point in the history
  • Loading branch information
eloquence committed Aug 20, 2019
1 parent 963b992 commit 1c8beed
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 5 deletions.
9 changes: 9 additions & 0 deletions docs/onboarding.rst
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,15 @@ To create a *Journalist Interface* Tails USB, just follow the same procedure you
used to create a Tails USB with persistence for the *Admin Workstation*,
as documented in the :doc:`Tails Setup Guide <set_up_tails>`.

.. note::

As with your *Admin Workstation*, you can use a fresh copy of the blank
KeePassX template in the repository to initialize the password database
on the *Journalist Workstation*. You can safely edit this copy to remove
sections or fields that are not relevant for the journalist you are
onboarding. For example, the admin section of the password database should
never be filled in on a *Journalist Workstation*.

Once you're done, boot into the new Journalist Tails USB on the
*Journalist Workstation*. Enable persistence and set an admin
passphrase before continuing with the next section.
Expand Down
9 changes: 4 additions & 5 deletions docs/passphrases.rst
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,10 @@ each role in a SecureDrop installation.

.. note:: We encourage each end user to use KeePassX, an easy-to-use
password manager included in Tails, to generate and retain
strong and unique passphrases. We have created a template
passphrase database that you can use to get started. For more
information, see the :ref:`KeePassX setup instructions <keepassx_setup>`,
which are identical for the *Admin Workstation* and the
*Journalist Workstation*.
strong and unique passphrases. The SecureDrop code repository includes
a template that you can use to initialize this database for an
*Admin Workstation* or a *Journalist Workstation*. For more
information, see the :ref:`KeePassX setup instructions <keepassx_setup>`.

.. tip:: For best practices on managing passphrases, see
:doc:`passphrase_best_practices`.
Expand Down

0 comments on commit 1c8beed

Please sign in to comment.