Codes

Lockbox applies two-factor authentication whenever contact between two users is to be established. One factor is typically a unique email address or Lockbox user id, the other factor are authentication codes. Lockbox makes use of a number of authentication codes which are described below.

Do not send authentication codes in plain text emails! Lockbox strongly recommends to pass authentication codes via SMS or with a phone call in order to increase security.

Registration Code

The registration code is used to authenticate an applicant during the registration process. An email with the registration code is sent to the email address the applicant has specified. The applicant proceeds as instructed in the Registration section.

Only by producing the correct registration code, the registration process continues until completion. If not, the registration process times out and the registration code becomes invalid after 30 minutes.

Contact Code

The contact code is required to establish a bi-directional relationship between two users. The code is generated by the Lockbox Client of the sender who needs to pass on the code to the receiver.

In order to accept the contact request, the receiver is required to login to their Lockbox Client and do the following:

1. Go to the main menu and open the ‘Contacts’ menu. Then select the ‘Accept contact’ item.
2. In the ‘Manage Pending Contacts’ dialog click the ‘Accept’ button of the corresponding contact request.
3. Enter the contact code in the input dialog and press ‘Accept Contact’ to confirm.
4. Wait until the contact has been established, then close the dialog by clicking the ‘Finished’ button.

After the receiver has processed the code, the contact between both parties is established instantaneously. A popup message informs the sender about the successful operation.

The receiver can decline a contact offer by clicking the corresponding button in the ‘Manage Pending Contacts’ dialog.

Change Owner Request Code

The change owner request code is needed for confirming the identity of the future owner of a box. The code is generated by the Lockbox Client of the current box owner (sender)  who needs to pass it on to the future owner (receiver).

To accept a change owner request, the receiver needs to login to their Lockbox Client and do the following:

1. Go to the main menu and open the ‘Contacts’ menu. Then select the ‘Accept Box Ownership’ item.
2. In the ‘Accept Box Ownership’ dialog click the ‘Accept’ button of the corresponding change owner request.
3. Enter the change owner request code in the input dialog and press ‘Accept’ to confirm.
4. Wait until the box ownership transfer is initialised, then close the dialog by clicking the ‘Finished’ button.

After the receiver has processed the code, the box ownership transfer is initialised. A popup message prompts the sender to confirm the change of box ownership.

The ownership transfer is completed only after the sender has confirmed the change of box ownership.