Authentication

The GOVlink Web Portal uses Two-Factor Authentication (2FA) for secure access.
This means that, in addition to an email and password, a One-Time Password (OTP) is required at each login.

Login Process

1. Enter your email address and personal password.

2. Enter the One-Time Password (OTP) generated by your authenticator app.

The OTP is a temporary code that changes every 30 seconds.
Users must retrieve a new code from their authenticator each time they log in.

🔗 Access the GOVlink Web Portal here: https://lux.webportal.paxgov.lu/

---

Setting Up the One-Time Password (OTP)

To generate OTP codes, users must install an authenticator tool on their device.

For smartphones:
You can use apps such as Google Authenticator or Free OTP.
Scan the QR code provided during setup and follow the steps in the app to complete OTP configuration.

For computers:
You can install a browser extension to generate OTP codes directly on your computer.

• Google Chrome: Authenticator Extension
• Mozilla Firefox: Auth Helper Extension

Since OTP codes regenerate every 30 seconds, users must use a fresh code each time they log in.

If a device is lost or replaced, the administrator can reset the OTP configuration, allowing the user to set it up again with a new QR code.

---

Session Security

• GOVlink automatically logs users out after 30 minutes of inactivity.
• Continuous sessions are limited to 10 hours.
• Users can also log out manually using the Sign Out option in the top navigation bar.

---

Password and OTP Reset

If a user forgets their password or needs to reset their OTP configuration, this can be done through the Update User screen (by an administrator).

Password Reset Process:

• After clicking Reset Password, the system sends an email to the user with a validation link.
• The user must update their password within 12 hours.
• After updating, the user logs in again with their new credentials.
• If not completed in time, the administrator must reissue the reset.

OTP Reset Process:

• After clicking Reset OTP, the system sends an email with a new validation link.
• The user reconfigures OTP authentication by scanning the new QR code.
• The process must also be completed within 12 hours, or the administrator must reset it again.