From 2a2dc2bad1f4b3c4782c774ee763e61ef3a30871 Mon Sep 17 00:00:00 2001 From: Muhammad Nauman Raza Date: Tue, 9 Apr 2024 21:52:29 +0100 Subject: [PATCH] fix the sentence itself --- Hardening-Guide.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Hardening-Guide.md b/Hardening-Guide.md index 45be4d1..023c75e 100644 --- a/Hardening-Guide.md +++ b/Hardening-Guide.md @@ -4,7 +4,7 @@ The subsections below cover hardening related to vaultwarden itself. ## Disable registration and (optionally) invitations -By default, vaultwarden allows any anonymous user to register new accounts on the server without first being invited. While this is not necessary if you have access to the admin page, this is useful if your first user on the server and is recommended that you disable it in the admin panel (if the admin panel is enabled) or [[with the environment variable|Disable-registration-of-new-users]] to prevent attackers from creating accounts on your vaultwarden server. +By default, vaultwarden allows any anonymous user to register new accounts on the server without first being invited. While this is not necessary if you have access to the admin page, this is useful if you're the first user on the server and is recommended that you disable it in the admin panel (if the admin panel is enabled) or [[with the environment variable|Disable-registration-of-new-users]] to prevent attackers from creating accounts on your vaultwarden server. vaultwarden also allows registered users to invite other new users to create accounts on the server and join their organizations. This does not pose an immediate risk (as long as you trust your users), but it can be disabled in the admin panel or [[with the environment variable|Disable-invitations]].