Bug: Reset admin user's password

[angelosefs]

What version of GlobaLeaks are you using?

Globaleaks 5.0.88 on Debian Linux

Describe the issue

This is not really a bug to be honest but I really need your help as the documentation it doesn't really help me.

I lost my access to the password of the admin user in the globaleaks portal. But i can access the root/admin user in the debian where globaleaks is installed.

How can i change my admin password? I tried everything gl-admin reset-password as i understand now it needs the old password which i dont have, also in the user table there is no column with a password

I understand that this implemented this way for security reasons but I really need a way to recover my admin account without breaking the existing installation.

Proposed solution (optional)

No response

[evilaliv3]

Hello @angelosefs

We are sorry to ear the situation.

We can guide you recovering configurations but i've to be clear that:

• there is no way to recover your account as is
• there is no way to recover your encryption keys and escrow keys
• if you have users and real submissions and they have their password the best thing right know is to ask to download alll the submissions

In fact at the moment having lost your administrative passwords and your account recovery key, there will be no to eventually recover your users account. For this reason it is prioritary to support them getting access to their data before they possible lose their password.