gitlab-org--gitlab-foss/doc/security/README.md

---
comments: false
type: index
---

# Security

- [Password storage](password_storage.md)
- [Password length limits](password_length_limits.md)
- [Generated passwords for users created through integrated authentication](passwords_for_integrated_authentication_methods.md)
- [Restrict SSH key technologies and minimum length](ssh_keys_restrictions.md)
- [Rate limits](rate_limits.md)
- [Webhooks and insecure internal web services](webhooks.md)
- [Information exclusivity](information_exclusivity.md)
- [Reset user password](reset_user_password.md)
- [Unlock a locked user](unlock_user.md)
- [User File Uploads](user_file_uploads.md)
- [How we manage the CRIME vulnerability](crime_vulnerability.md)
- [Enforce Two-factor authentication](two_factor_authentication.md)
- [Send email confirmation on sign-up](user_email_confirmation.md)
- [Security of running jobs](https://docs.gitlab.com/runner/security/)
- [Proxying images](asset_proxy.md)
- [CI/CD environment variables](cicd_environment_variables.md)

## Securing your GitLab installation

Consider access control features like [Sign up restrictions](../user/admin_area/settings/sign_up_restrictions.md) and [Authentication options](../topics/authentication/) to harden your GitLab instance and minimize the risk of unwanted user account creation.
Exclude comments from specific docs 2017-11-01 11:56:40 -04:00			`---`
			`comments: false`
Add type to frontmatter 2019-06-07 09:55:22 -04:00			`type: index`
Exclude comments from specific docs 2017-11-01 11:56:40 -04:00			`---`

Update docs to markdown style guide. 2014-04-24 18:48:22 -04:00			`# Security`

Document how GitLab stores passwords Provide details on how GitLab stores passwords, including hashing, stretching, and salting. This was driven by a customer asking for this information for a security compliance audit report. 2019-08-21 17:49:04 -04:00			`- [Password storage](password_storage.md)`
Update docs to markdown style guide. 2014-04-24 18:48:22 -04:00			`- [Password length limits](password_length_limits.md)`
Add latest changes from gitlab-org/gitlab@master 2020-08-19 14:10:34 -04:00			`- [Generated passwords for users created through integrated authentication](passwords_for_integrated_authentication_methods.md)`
Address review comments 2017-08-28 16:33:35 -04:00			`- [Restrict SSH key technologies and minimum length](ssh_keys_restrictions.md)`
Add rate limit docs 2019-08-01 22:41:52 -04:00			`- [Rate limits](rate_limits.md)`
web hooks to webhooks 2016-03-10 14:48:29 -05:00			`- [Webhooks and insecure internal web services](webhooks.md)`
Add information on information exclusivity. 2014-09-18 03:41:38 -04:00			`- [Information exclusivity](information_exclusivity.md)`
Add latest changes from gitlab-org/gitlab@master 2020-09-04 05:08:38 -04:00			`- [Reset user password](reset_user_password.md)`
Add instructions to unlock an account Originally submitted at https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/6578. Signed-off-by: Rémy Coutable <remy@rymai.me> 2018-07-18 12:06:31 -04:00			`- [Unlock a locked user](unlock_user.md)`
Document file upload random uuid security 2015-12-10 11:24:08 -05:00			`- [User File Uploads](user_file_uploads.md)`
Adding how we manage CRIME vulnerability to security docs [ci skip] 2015-12-19 16:16:50 -05:00			`- [How we manage the CRIME vulnerability](crime_vulnerability.md)`
Make "Two-factor" casing consistent throughout the application 2016-01-31 20:34:51 -05:00			`- [Enforce Two-factor authentication](two_factor_authentication.md)`
Change landing page when skipping confirmation email and add documentation 2016-05-06 16:59:45 -04:00			`- [Send email confirmation on sign-up](user_email_confirmation.md)`
Docs: Misc small fixes to docs 2019-02-12 07:45:20 -05:00			`- [Security of running jobs](https://docs.gitlab.com/runner/security/)`
Add support for using a Camo proxy server User images and videos will get proxied through the Camo server in order to keep malicious sites from collecting the IP address of users. 2019-02-20 18:51:55 -05:00			`- [Proxying images](asset_proxy.md)`
Add latest changes from gitlab-org/gitlab@master 2020-03-19 05:09:27 -04:00			`- [CI/CD environment variables](cicd_environment_variables.md)`
Add latest changes from gitlab-org/gitlab@master 2020-01-06 01:08:07 -05:00
			`## Securing your GitLab installation`

Add latest changes from gitlab-org/gitlab@master 2020-05-19 05:08:12 -04:00			`Consider access control features like [Sign up restrictions](../user/admin_area/settings/sign_up_restrictions.md) and [Authentication options](../topics/authentication/) to harden your GitLab instance and minimize the risk of unwanted user account creation.`