View source for Template:Committed identity/doc

{{documentation subpage}} 
{{High-use}}
{{uses TemplateStyles|Template:Committed identity/styles.css}}
This template gives you a <nowiki>way</nowiki> to later prove that you are the person who was in control of your account on the day this template was placed. This is done by putting a code (called a "hash") on your user page so that, in the event that your account is compromised, you can convince someone else that you are really the person behind your username.

==About==

The intended use of this template is to help in the hopefully unlikely event that your account is compromised. If you published your real-life identity, then that identity could be used to reestablish contact with you if your account were compromised; keep in mind, in this scenario contact could not be established with you through your account, since it may be under the control of someone else. However, many Wikipedia users do not disclose their real-life identities, or disclose little enough of them that it may be difficult to establish their identity.

This is not a replacement for having a [[Password strength|strong password]], nor for registering an email address for your account. You should still do everything you can to prevent your account being compromised, including using a strong password and remembering to log yourself out when using a computer to which others may have access. If you have one, it may also be helpful to post your [[Pretty Good Privacy|PGP]] public key. But even with the best of precautions, your account could become compromised, for instance, via a [[trojan horse (computing)|trojan horse]] or a brute-force attack on your password. This is intended to be a last resort.

==Usage==

The idea is to use cryptographic hashes; you choose a secret string known only to yourself, put it through a one-way [[Cryptographic hash function|hash function]], and publish the result somewhere. It is infeasible to determine the secret string corresponding to the hash; hence, an attacker compromising an account presumably would not be able to supply the secret string.

=== Syntax ===
:<code>{<nowiki/>{Committed identity|<var>hash</var>|<var>hash function used</var>|background=<var>[[Web_colors#CSS_colors|CSS color]]</var>|border=<var>[[Web_colors#CSS_colors|CSS color]]</var>|article=<var>[[Article (grammar)|grammatical article]] for the hash function</var>}}</code>

Italicized text should be replaced with appropriate input, or its parameter should be removed. Parameters are represented by "parameter=<var>value</var>", and separated by vertical bars |.
*Replace "hash" with the hash produced from your secret string. This unnamed parameter is equivalent to a parameter named "1" (see [[Help:Template#Parameters|parameters]]).
*The "hash function used" parameter, if not included, defaults to [[SHA-512]]. (This hash function is strongly recommended.)
*The "background" parameter, if not included, defaults to #E0E8FF (<span style="background-color: #E0E8FF;">light blue</span>, see [[Web colors#Hex triplet]])
*The "border" parameter, if not included, also defaults to #E0E8FF.
*The "article" parameter, if not included, defaults to "a". The other likely value is "an".
*The "extra-style" parameter can be used to specify additional style considerations, such as "text-align:center".
For example, if your hash is "1eb00f7cdeaa38f5e9aec8f065b956acf94d416a4a40c1fb5d1dd23b857ba6fe" using [[SHA-256]], and you want a light orange box with a black border, use the following code:
:<code>{<nowiki/>{Committed identity|1eb00f7cdeaa38f5e9aec8f065b956acf94d416a4a40c1fb5d1dd23b857ba6fe|SHA-256|background=#FC9|border=#000}}</code>
to produce
{{Committed identity|1eb00f7cdeaa38f5e9aec8f065b956acf94d416a4a40c1fb5d1dd23b857ba6fe|SHA-256|background=#FC9|border=#000}}

=== Obtaining a hash ===

Use [[toolforge:ftools/general/text2hash.html|Fastily's browser tool]] or software on your computer such as <code>sha512sum</code> provided in the [[GNU Core Utilities]]. The use of other online hash generators is not recommended, as they are outside Wikipedia's control and should not be trusted with your secret string.

==== Ultrasecure method ====
# Your secret string should start or end with a long string of random text like "fFfwq0DuDmMXj8hYTM3NTKeDhk". This ensures that brute force and dictionary attacks cannot infer your identity from your public hash. Do not use the example random text provided here, you should generate your own.
# Your secret string should specify enough of your identity that, if the string were revealed, you could unambiguously prove that you match that identity. At least two means of contact is a good rule. For instance, your secret string could include a telephone number and email address at which you can be reached. However, it should ''not'' contain data that you are not willing to show to Wikipedia's administrative staff.
# Try not to choose a secret string that represents your identity that could go completely out of date. For instance, it may be bad to choose a string that specifies ''only'' your telephone number as that number might change.
# If you want to change your secret string, do so, but keep track of all your old secret strings. It is best to reveal all of them if you ever want to confirm your identity, as this will establish that you are the same person who used your account from the first moment the committed identity was published.
# Advanced options:
#* If you have public accounts on other websites with different passwords, list URLs of those accounts. You can later take a specified action to prove that you own those accounts. For example, if you have a YouTube account, an administrator can provide a string which you then insert in a video comment.
#* You may include information such as your driver's license number, national identification number, or passport number. You can then later supply copies of these documents as additional evidence to prove your identity.
#* Another option is to take a photo or video of yourself, take a SHA hash of the resulting file, and include that hash in your secret string. Retain the file. You can then later supply the file to an administrator, and they can video call with you and compare the file with your current appearance. This will remain effective even if the attacker has compromised all your listed means of contact.

;Example

Full name, multiple forms of contact, contact information for trusted friends, and a random string:

<code>Joe Schmoe. joe@example.com. 555-123-3456. P.O. Box 1234, San Jose, CA. My best friend Bob's email: bob@example.com. fFfwq0DuDmMXj8hYTM3NTKeDhk</code>
which results in a SHA-512 hash of <div id="hash-nowrap" style="font-family:Courier; font-size:100%; display:block; background:#f9f9f9; border:1px solid #f9f9f9; margin:0.2em 0; padding:0.1em 0.3em; word-wrap:break-word">92938b5423a1793d836333694cf0e55d92b42fb0c14ffcfe8349b51e86bceedcf9631398c31e1afdf114936502ca95577fa9014c26d718e77a235eb889ed56f3</div>

====Passphrase method====

For a simpler way of choosing a string, you can use a [[passphrase]], as illustrated in [https://xkcd.com/936/ this ''XKCD'' comic] or a [https://theintercept.com/2015/03/26/passphrases-can-memorize-attackers-cant-guess/ Diceware method]. The passphrase should be something easy for you to remember, but hard for someone else to guess like an [[inside joke]] or a [[secret]]. As usual, the longer the passphrase, the more secure it is. With the Diceware method, at one trillion guesses per second, a 4-word passphrase can be cracked in half an hour, a 5-word passphrase in 6 months, a 6-word passphrase in 3500 years and a 7-word passphrase in 27 million years. If you come up with your own passphrase, it will be less secure because some words are more likely to be paired with others (e.g. ''You'' is often followed by ''are'', but rarely by ''cytoplasm''). You are also more likely to use common words (''my'', ''you'', ''are'', ''and'', ''the'', ''of'') than obscure ones (''agastopia'', ''erinaceous'', ''impignorate'', ''kakorrhaphiophobia'').

;Examples (good)
These examples would be good if they had not already been published here (and elsewhere), so don't use any of these exact ones  (or simple variants) - this is just to illustrate some formats of good passphrases.
*String: <code>correct horse battery staple</code>
*String: <code>Who you gonna call? Ghost don't exist you nutjob!</code>
*String: <code>I actually like Battlefield Earth.</code>

;Examples (bad)
*String: <code>My name is Bob.</code>
*String: <code>I was born in 1982.</code>
*String: Any one word, or specific years/date.
*String: Any famous quotes, or any book sentences.

==Password reset==
Anyone who wishes to get a password reset through the Committed Identity process should exhaust other options first. There is not a routine process for resetting passwords, and calling for a committed identity password reset will take time and the agreement of several humans who will discuss the case.

Before the Committed Identity process, confirm that you still know your passphrase by inputting your passphrase through any safe tool to get your confirmed identity. After you confirm your own passphrase, now make the request. When you make the request, follow the guidance at <span class="nowrap">{{Section link|Help:Logging in|What if I forget my password?}}</span> which {{as of|2022|12|lc=y|url=https://en.wikipedia.org/wiki/Help:Logging_in#What_if_I_forget_my_password?}} recommends emailing {{No spam blue|ca|wikimedia.org}} for advice and not to publicly mention the secret string.

==See also==
* [[meta:Make sure you have a password|Make sure you have a password (essay)]]
* [[User:Unimaginative Username/Simple Committed ID Instructions]]
* [[Strong password]]
* [[Wikipedia:Changing username]]
* [[Wikipedia:Security]]
* [[Wikipedia:Wikipedia Signpost/2007-05-14/Committed identity|Wikipedia Signpost: Committed identity]]
* [[meta:Help:Two-factor authentication|Two-factor authentication]]
* {{Tl|Committed identity topicon}} (symbolic)

{| border="1" cellspacing="0" cellpadding="3" width="100%" style="background:none"
!width="300"|Code
!Result
!Transclusions
|-
| {{[[User:Anomie/Userbox committed identity]]|...}}
| {{User:Anomie/Userbox committed identity|identity=hash}}
| class="plainlinks" | [{{fullurl:Special:Whatlinkshere/User:Anomie/Userbox committed identity|limit=500}} Transclusions]
|-
{{usbk|User:Urdna/CIDuserbox}}
|-
{{usbk|User CID}}
|}

<includeonly>{{Sandbox other||
<!-- Categories -->
{{DEFAULTSORT:Committed Identity}}
[[Category:User namespace templates]]
}}</includeonly>