Skip to content

Recovery Mail soft lock #614

Description

@aceArt-GmbH
  • API: CE 5.13.0
  • Environment
    • Operating system: Docker latest-ce
    • PHP: 8.4.21
    • Web server: whatever docker ships with
    • Database server: mariadb:10.11

What you did?

Image

We accidentally disabled the Email notification for user recovery.

What happened?

Image

on login try, it says the required mail was sent, when in reality it was not sent.
I had to create a new admin users to login in and change the setting back.
(new admin user does not rely on email)

What you expected to happen?

I was not expecting a setting which could lock you out of your instance.
I think it should be removed or a warning be added.
Or at least the login should not say a mail was sent when the config disabled this mail.

What is the use case for this setting?
There is no other way for a user to login, is there?

Otherwise nice looking tool, thx

Activity

  1. aceArt-GmbH commented on Aug 5, 2026

    @aceArt-GmbH
    Author

    Another mail related issue we are facing which I want to give a little attention: https://community.passbolt.com/t/as-a-passbolt-admin-i-want-a-ui-warning-that-email-content-visibility-toggles-do-not-apply-to-v5-encrypted-metadata-resources-so-that-i-do-not-waste-time-troubleshooting-expected-behavior/14366
    We were hoping to use this feature as a way to recover deleted entries. But it makes sense that the server can't read those infos.
    Maybe a trash bin of some sorts would be a solution

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions