> For the complete documentation index, see [llms.txt](https://docs.lionparcel.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.lionparcel.com/release-note/release-note-en/news-and-update/security-account.md).

# Security Account

### Security - Password Expired

In order to improve account security, we added a password expiration policy that requires users to update their password periodically

Here is the tutorial we provide

### System Warning Notification

<figure><img src="/files/9a90353a26b470b7420fae973268fd6eb0ad8ea3" alt=""><figcaption></figcaption></figure>

If the user sees a red notification at the top of the page, as in the example above, it indicates a condition that requires immediate attention.\
\
This notification appears as a system warning related to a certain status that could interfere with optimal use of the application.

### Expired Password Notification (Popup When Logging In)

<figure><img src="/files/00944e0900db87c27109b8d8d60fd5e4da99cf8d" alt=""><figcaption></figcaption></figure>

If the user sees a popup on the login page with the message “Password Sudah Tidak Berlaku”, it means the account password has expired and must be updated before the user can access the system. The action to take is to click the button **"Set Password"**

### Account Verification (After Password Expiration)

<figure><img src="/files/7d5ac8771fa86096b41fcfe6e2a547df8f86f2d7" alt=""><figcaption></figcaption></figure>

After the user selects the option **“Set Password”**, the system will direct them to the **Account Verification**. This page is used to ensure that the password change process is carried out by an authorized user. If the user does not know the client ID/partner in question, the user can click "use another verification method"

### OTP Code Verification

<figure><img src="/files/74318b30d305c65ae41768b446438891d46bdb62" alt=""><figcaption></figcaption></figure>

After the user successfully passes the **Account Verification**, the system will send **an OTP (One-Time Password) code** to the registered email.

The user will be directed to the **OTP Code Verification** to continue the password reset process.

### Reset Password

<figure><img src="/files/45673e9d9368ff3feedc43f7f28583fe45091691" alt=""><figcaption></figcaption></figure>

After the user successfully completes the verification process (Partner/Client Code and OTP), the system will direct them to the **Reset Password**.

This page is used to create a new password to replace the expired password&#x20;

<figure><img src="/files/cfff084b828ad8e39fcc30cba285ea6462109b04" alt=""><figcaption></figcaption></figure>

After the user successfully resets the password, the system will display a confirmation popup with the message: **"Password Reset Successful"**

## Login OTP Request (MFA)

### OTP Activation (First-Time Login)

<img src="/files/1740028df26426a2d4fcf03094d9dbca4a108e44" alt="" height="278" width="371">

1. When logging in, if the user has not activated OTP yet, a popup will appear directing the user to activate OTP
2. When activation is performed, the system will send an OTP for the first time to the user's email, and the user is required to enter the OTP to continue the login process

### Login OTP Request (Second and Subsequent Logins)

<figure><img src="/files/c7034a66bb351ce145bfc2e107894e3ed7d44053" alt=""><figcaption></figcaption></figure>

1. Once the login process is successful, the user will be required to enter an OTP for login verification
2. The OTP after login will apply across all Lion Parcel platforms:\
   \- Genesis Website\
   \- Genesis Mobile\
   \- Liberta (Internal)
3. The OTP will be sent via email to the user's registered email for Genesis Website, Genesis Mobile, and Liberta

### OTP Activation (For Users Who Have Previously Logged In)&#xD;<br>

<figure><img src="/files/e1dbc9df4f10dce38fb47f6ba67e3c74c4d444dc" alt=""><figcaption></figcaption></figure>

1. Users can activate OTP through the profile page on both Liberta and Genesis
2. If the user activates OTP, they will be asked to enter the OTP for the first time
3. After OTP is successfully completed, the activation process is finished and for every login the user must enter OTP

Password & OTP for Change Email Genesis (MFA) <br>
--------------------------------------------------

<figure><img src="/files/97ad498f0b36e07f4c764545a545a52230484690" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/393c603f0c021c51f4c8d9594f14db15a12c8baf" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/802016b9c9182381de352756d9e07915d7d8a8f0" alt=""><figcaption></figcaption></figure>

1. When the user wants to change the email in Genesis, they will enter the new email they want to change to
2. After that, the user is required to enter their Genesis password
3. If successful, the user must enter the OTP that will be sent to the new changed email
4. The user will also receive an email notification of the email change at the old email address

<figure><img src="/files/5cafee2a0a845f0ff51a832462b6b60211b2df5b" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/aa9935efa33b323cc58d4ef40b899a1f61a98ab7" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.lionparcel.com/release-note/release-note-en/news-and-update/security-account.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.