From 7d219a950bc9bbe6ff951498aede6aa46d68d92a Mon Sep 17 00:00:00 2001 From: Mathijs van Veluw Date: Fri, 28 Apr 2023 16:59:03 +0200 Subject: [PATCH] Updated Enabling admin page (markdown) --- Enabling-admin-page.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/Enabling-admin-page.md b/Enabling-admin-page.md index a349e93..cbff99a 100644 --- a/Enabling-admin-page.md +++ b/Enabling-admin-page.md @@ -30,7 +30,11 @@ In order to disable the admin page you have to unset the `ADMIN_TOKEN` and resta ## Secure the `ADMIN_TOKEN` -> :warning: This feature is released in [1.28.0](https://github.com/dani-garcia/vaultwarden/releases/tag/1.28.0)+. Previous versions do not support Argon2 hashing. +> :warning: This feature is available since [1.28.0](https://github.com/dani-garcia/vaultwarden/releases/tag/1.28.0)+. + +> :warning: Using environment variables is preferred.
+> :warning: But if you updated settings via the admin interface you need to update the admin token via the same web interface!
+> :warning: Please **do not** edit the `config.json` manually since that could cause issues if done wrong! Previously the `ADMIN_TOKEN` could only be in a plain text format.
You can now hash the `ADMIN_TOKEN` using Argon2 by generating a [PHC string](https://github.com/P-H-C/phc-string-format/blob/master/phc-sf-spec.md).