diff --git a/_articles/faqs/autofill-faqs.md b/_articles/faqs/autofill-faqs.md index 46b40e93..bf78dd2e 100644 --- a/_articles/faqs/autofill-faqs.md +++ b/_articles/faqs/autofill-faqs.md @@ -38,4 +38,4 @@ order: "10" 2. Log out of your Bitwarden mobile app. 3. Check that your device settings are [setup to use Bitwarden for autofill]({{site.baseurl}}/auto-fill-ios/#keyboard-auto-fill). 4. Log back in to your Bitwarden mobile app. -5. Re-enable [PIN Code]({{site.baseurl}}/unlock-with-pin/) verification if you want to use it as a backup for [biometrics]({{site.baseurl}}/unlock-with-biometrics/). +5. Re-enable [PIN Code]({{site.baseurl}}/unlock-with-pin/) verification if you want to use it as a backup for [biometrics]({{site.baseurl}}/biometrics/). diff --git a/_articles/faqs/org-faqs.md b/_articles/faqs/org-faqs.md index 92efb485..b93cd88f 100644 --- a/_articles/faqs/org-faqs.md +++ b/_articles/faqs/org-faqs.md @@ -11,9 +11,9 @@ order: "18" This article contains Frequently Asked Questions (FAQs) regarding **Organizations**. For more high-level information about **Organizations**, refer to the following articles: -- [About Organizations](https://bitwarden.com/help/about-organizations/) -- [About Collections](https://bitwarden.com/help/about-collections/) -- [About Groups](https://bitwarden.com/help/about-groups/) +- [About Organizations]({{site.baseurl}}/about-organizations/) +- [About Collections]({{site.baseurl}}/about-collections/) +- [About Groups]({{site.baseurl}}/about-groups/) ## Organizations General @@ -37,7 +37,7 @@ Paid Organizations (Families, Teams, or Enterprise) automatically include premiu ### Q: What events are audited for my Organization? -**A:** For a full list of what's included in Bitwarden Event Logs, see [Event Logs](https://bitwarden.com/help/event-logs/). +**A:** For a full list of what's included in Bitwarden Event Logs, see [Event Logs]({{site.baseurl}}/event-logs/). ### Q: Can I prevent users from self-registering into my Organization? @@ -66,7 +66,7 @@ Alternatively, you can unshare items by moving them to a different Collection wi ### Q: How do I hide a password from my Organization's users? -**A:** Use the **Hide Passwords** option in the **Access Control** section when adding new users or editing existing ones in order to hide a given Collection's passwords and hidden fields from them. For more information, see [Access Control](https://bitwarden.com/help/user-types-access-control/#access-control). +**A:** Use the **Hide Passwords** option in the **Access Control** section when adding new users or editing existing ones in order to hide a given Collection's passwords and hidden fields from them. For more information, see [Access Control]({{site.baseurl}}/user-types-access-control/#access-control). ### Q: Does an item I move to the Organization stay after I leave? diff --git a/_articles/organizations/onboarding-and-succession.md b/_articles/organizations/onboarding-and-succession.md index 72968aba..69075ecd 100644 --- a/_articles/organizations/onboarding-and-succession.md +++ b/_articles/organizations/onboarding-and-succession.md @@ -127,7 +127,7 @@ Alice is a **Manager** in your Organization, which is hosted on the Bitwarden Cl |**Client Applications**|Uses Bitwarden on Mobile and a Browser Extension personally and professionally, and the Web Vault for occasional Organization-related work.| |**Email & Master Password**|Logs in to Bitwarden using `alice@company.com` and `p@ssw0rD`.| |**Personal Items**|Stores assorted personal items, including Logins and Credit Cards, in her Personal Vault.| -|**Permissions in the Organization**|As a [Manager]({{site.baseurl}}s/user-types-access-control/), Jane can manage many aspects of Collections.| +|**Permissions in the Organization**|As a [Manager]({{site.baseurl}}/user-types-access-control/), Jane can manage many aspects of Collections.| |**Two-step Login**|Uses Organization-wide [Duo 2FA]({{site.baseurl}}/setup-two-step-login-duo).| |**Created Collections**|Created a Collection for her team, "Jane's Team Collection".| |**Shared Items**|Created and shared several Vault items that are owned by by the Organization and reside in her team's Collection.| diff --git a/_articles/plans-and-pricing/why-choose-bitwarden-for-your-team.md b/_articles/plans-and-pricing/why-choose-bitwarden-for-your-team.md index 0bc54c98..113b95e0 100644 --- a/_articles/plans-and-pricing/why-choose-bitwarden-for-your-team.md +++ b/_articles/plans-and-pricing/why-choose-bitwarden-for-your-team.md @@ -8,7 +8,7 @@ hidden: false tags: [organization, enterprise, teams, plans, subscription] order: "02" --- -Use a Bitwarden Teams [Organization]({{site.baseurl}}/about-organizaations) to securely share data with coworkers, department, or an entire company. With many choices out there, Bitwarden stands apart with a comprehensive Teams offering. +Use a Bitwarden Teams [Organization]({{site.baseurl}}/about-organizations) to securely share data with coworkers, department, or an entire company. With many choices out there, Bitwarden stands apart with a comprehensive Teams offering. ## Comparing Bitwarden Teams and Others diff --git a/_articles/security/bitwarden-security-white-paper.md b/_articles/security/bitwarden-security-white-paper.md index eeac64ef..f604efc2 100644 --- a/_articles/security/bitwarden-security-white-paper.md +++ b/_articles/security/bitwarden-security-white-paper.md @@ -82,7 +82,7 @@ This also means no one from the Bitwarden team can ever see, read, or reverse en After creating your account and specifying your Master Password , Bitwarden next generates several keys that are used in protecting your account’s data. {% callout note %} -In mid 2021, Bitwarden introduced Admin Password Reset for Enterprise plans. With this option, users and organizations have the opportunity to implement a new policy allowing Administrators and Owners to reset passwords for users. For more detail on this feature, visit our help site at [https://bitwarden.com/help/releasenotes/](https://bitwarden.com/help/releasenotes/) +In mid 2021, Bitwarden introduced Admin Password Reset for Enterprise plans. With this option, users and organizations have the opportunity to implement a new policy allowing Administrators and Owners to reset passwords for users. For more detail on this feature, visit our help site at [https://bitwarden.com/help/releasenotes/]({{site.baseurl}}/releasenotes/) {% endcallout %} @@ -139,18 +139,18 @@ You can enable multiple two-step login methods. If you have multiple two-step lo **It is very important that you never lose your two-step login recovery codes.** Bitwarden offers an account protection security model that does not support users losing their Master Password or two-step login recovery codes. If you have two-step login enabled on your account and lose access to your two-step login recovery codes you will not be able login to your Bitwarden account. {% callout note %} -In mid 2021, Bitwarden introduced Admin Password Reset for Enterprise plans. With this option, users and organizations have the opportunity to implement a new policy allowing Administrators and Owners to reset passwords for users. For more detail on this feature, visit our help site at [https://bitwarden.com/help/releasenotes/](https://bitwarden.com/help/releasenotes/) +In mid 2021, Bitwarden introduced Admin Password Reset for Enterprise plans. With this option, users and organizations have the opportunity to implement a new policy allowing Administrators and Owners to reset passwords for users. For more detail on this feature, visit our help site at [https://bitwarden.com/help/releasenotes/]({{site.baseurl}}/releasenotes/) {% endcallout %} #### Changing User Password -Your Master Password can only be changed from the [Web Vault](https://vault.bitwarden.com/#/). For specific steps on how to change your user password, see this Bitwarden Help [article](https://bitwarden.com/help/change-your-master-password/). +Your Master Password can only be changed from the [Web Vault](https://vault.bitwarden.com/#/). For specific steps on how to change your user password, see this Bitwarden Help [article]({{site.baseurl}}/change-your-master-password/). #### Rotating Your Accounts Encryption Key During a password change operation you also have the option to rotate (change) your account’s encryption key. Rotating the encryption key is a good idea if you believe that your previous Master Password was compromised or that your Bitwarden Vault’s data was stolen from one of your devices. {% callout warning %} -Rotating your account’s encryption key is a sensitive operation, which is why it is not a default option. A key rotation involves generating a new, random encryption key for your account and **re-encrypting all Vault data** using this new key. See additional details in this Bitwarden Help [article](https://bitwarden.com/help/change-your-master-password/). +Rotating your account’s encryption key is a sensitive operation, which is why it is not a default option. A key rotation involves generating a new, random encryption key for your account and **re-encrypting all Vault data** using this new key. See additional details in this Bitwarden Help [article]({{site.baseurl}}/change-your-master-password/). {% endcallout %} #### Data Protection in Transit @@ -167,7 +167,7 @@ AES is a standard in cryptography and used by the U.S. government and other gove PBKDF-SHA256 is used to derive the encryption key from your Master Password. Then this key is salted and hashed for authenticating with the Bitwarden servers. The default iteration count used with PBKDF2 is 100,001 iterations on the client (this client-side iteration count is configurable from your account settings), and then an additional 100,000 iterations when stored on our servers (for a total of 200,001 iterations by default). -Learn more: [How end-to-end encryption paves the way for zero knowledge](https://bitwarden.com/blog/post/end-to-end-encryption-and-zero-knowledge/) and [What encryption is being used](https://bitwarden.com/help/what-encryption-is-used/) +Learn more: [How end-to-end encryption paves the way for zero knowledge](https://bitwarden.com/blog/post/end-to-end-encryption-and-zero-knowledge/) and [What encryption is being used]({{site.baseurl}}/what-encryption-is-used/) ### How Vault Items Are Secured All information (Logins, Cards, Identities, Notes) associated with your stored Vault data is protected with end-to-end encryption. Items that you choose to store in your Bitwarden Vault are first stored with an item called a Cipher object. Cipher objects are encrypted with your Generated Symmetric Key, which can only be known by decrypting your protected Symmetric Key using your Stretched Master Key. This encryption and decryption are done entirely on the Bitwarden Client because your Master Password or Stretched Master Key is never stored on or transmitted to Bitwarden servers. @@ -185,14 +185,14 @@ For Personal Vaults, individuals have access to the following: For business users, a similar set of reports exists for Organization Vault items. -Read more:[Vault Health reports](https://bitwarden.com/help/reports/) +Read more:[Vault Health reports]({{site.baseurl}}/reports/) For more information on Bitwarden Event Logs and external reporting, see [Event Logs](#event-logs). ### Importing Passwords and Other Secrets into Bitwarden -You can easily import your data from over 40 different services, including all the popular password manager applications, to Bitwarden. The full list of supported applications and some additional information, including troubleshooting steps for importing your data into Bitwarden, are documented in [Bitwarden Help Center](https://bitwarden.com/help/import-data/). +You can easily import your data from over 40 different services, including all the popular password manager applications, to Bitwarden. The full list of supported applications and some additional information, including troubleshooting steps for importing your data into Bitwarden, are documented in [Bitwarden Help Center]({{site.baseurl}}/import-data/). -If you are exporting your sites from the LastPass.com Web Vault, please refer to the specific information on this Help note [Import your data from LastPass](https://bitwarden.com/help/import-from-lastpass/). +If you are exporting your sites from the LastPass.com Web Vault, please refer to the specific information on this Help note [Import your data from LastPass]({{site.baseurl}}/import-from-lastpass/). ### Sharing Data between Users @@ -206,28 +206,28 @@ You can create a new Bitwarden Organization from the Web Vault or request that a When you create an Organization, an Organization Symmetric key is generated using a Cryptographically Secure Pseudorandom Number Generator (CSPRNG). The Organization Symmetric Key is encrypted using the public key from your Generated RSA Key Pair. The private key from your Generated RSA Key Pair is encrypted with your Generated Symmetric Key using AES-256. The Generated RSA Key Pair and Generated Symmetric Key were created when you first signed up and registered your account. -Read More: [What are Organizations?](https://bitwarden.com/help/what-is-an-organization/) +Read More: [What are Organizations?]({{site.baseurl}}/what-is-an-organization/) #### Access Controls and Managing Bitwarden Collections As your Organization’s use of Bitwarden grows, it helps to have users who can manage Collections independently, without requiring access to everything within the Organizational Vault. Managing Collections and Groups is a simple way to separate, grant, or limit access to Vault items in Bitwarden, thereby controlling user visibility of resources. -A complete list of roles and access control is documented in the [User Types and Access Control](https://bitwarden.com/help/user-types-access-control/) section of Bitwarden Help Center. +A complete list of roles and access control is documented in the [User Types and Access Control]({{site.baseurl}}/user-types-access-control/) section of Bitwarden Help Center. -Read more: [how to manage Collections](https://bitwarden.com/help/how-to-manage-collections/) +Read more: [how to manage Collections]({{site.baseurl}}/how-to-manage-collections/) #### Event Logs Event logs contain time-stamped, detailed information about what actions or changes have occurred within an Organization. These logs are helpful with researching changes in credentials or configuration and very useful for audit trail investigation and troubleshooting purposes. -Additional information on [Event Logs](https://bitwarden.com/help/event-logs/) is documented in Bitwarden Help Center. Event logs are available for Teams and Business plans only. +Additional information on [Event Logs]({{site.baseurl}}/event-logs/) is documented in Bitwarden Help Center. Event logs are available for Teams and Business plans only. To gather more data, plans with API access can use the Bitwarden API. API responses will contain the type of event and relevant data. #### SIEM Integration and External Systems For Security Information and Event Management (SIEM) systems like Splunk, when exporting data from Bitwarden, a combination of data from the API and CLI may be used to gather data. -This process is outlined in the help center note on **Organization event logs** under [SIEM and External Systems Integrations](https://bitwarden.com/help/event-logs/#siem-and-external-system-integrations). +This process is outlined in the help center note on **Organization event logs** under [SIEM and External Systems Integrations]({{site.baseurl}}/event-logs/#siem-and-external-system-integrations). ### Account Protection and Avoiding Lockout Today, for Basic, Premium, Family and Teams Plans, Bitwarden offers account protection with a security model that does not support users losing their passwords or two-step login recovery codes. @@ -254,7 +254,7 @@ If you choose or are required by your Organization to set up two-step login, be ### Admin Password Reset in Enterprise Plans -In mid 2021, Bitwarden introduced Admin Password Reset for Enterprise plans. With this option, users and organizations have the opportunity to implement a new policy allowing Administrators and Owners to reset passwords for users. For more detail on this feature, visit our help site at [https://bitwarden.com/help/releasenotes/](https://bitwarden.com/help/releasenotes/) +In mid 2021, Bitwarden introduced Admin Password Reset for Enterprise plans. With this option, users and organizations have the opportunity to implement a new policy allowing Administrators and Owners to reset passwords for users. For more detail on this feature, visit our help site at [https://bitwarden.com/help/releasenotes/]({{site.baseurl}}/releasenotes/) ### Bitwarden Cloud Platform and Web Application Security @@ -302,7 +302,7 @@ Bitwarden processes and stores all data securely in the Microsoft Azure cloud us Azure Service Configurations are leveraged by Bitwarden to ensure applications are configured and deployed in a repeatable and consistent manner. #### Bitwarden Platform Key Management Procedures -Keys and other secrets utilized by the Bitwarden platform itself, include credentials for the Bitwarden cloud provider accounts. All such keys are generated, securely stored, and rotated as needed, in accordance with industry-standard practices. Bitwarden uses an internal Bitwarden vault for secure storage and backup of sensitive keys or other secrets utilized by the Bitwarden platform. Access control to the Bitwarden vault leverages [User Types and Access Control](https://bitwarden.com/help/user-types-access-control/). +Keys and other secrets utilized by the Bitwarden platform itself, include credentials for the Bitwarden cloud provider accounts. All such keys are generated, securely stored, and rotated as needed, in accordance with industry-standard practices. Bitwarden uses an internal Bitwarden vault for secure storage and backup of sensitive keys or other secrets utilized by the Bitwarden platform. Access control to the Bitwarden vault leverages [User Types and Access Control]({{site.baseurl}}/user-types-access-control/). #### Data Types and Data Retention Bitwarden processes two kinds of user data to deliver the Bitwarden Service: (i) Vault Data and (ii) Administrative Data. @@ -392,7 +392,7 @@ Bitwarden leverages [HTTP Security headers](#http-security-headers) as an additi #### Code Assessments Bitwarden is an open source password manager. All of our source code is hosted and publicly available on [GitHub](https://github.com/bitwarden) for review. Bitwarden source code has been and continues to be audited annually by reputable third-party security auditing firms as well as independent security researchers. In addition, The Bitwarden Vulnerability Disclosure Program enlists the help of the hacker community at HackerOne to make Bitwarden more secure. -Read more: [Bitwarden Security FAQs](https://bitwarden.com/help/security-faqs/) +Read more: [Bitwarden Security FAQs]({{site.baseurl}}/security-faqs/) [Bitwarden Threat Prevention and Response](#threat-prevention-and-response) [Bitwarden Security and Compliance Assessments, Reviews, Vulnerability Scans, PenTesting](#auditability-and-compliance) diff --git a/_redirects b/_redirects new file mode 100644 index 00000000..031a1c1c --- /dev/null +++ b/_redirects @@ -0,0 +1 @@ +/help/article/* /help/:splat 301!