Password management for library users

Library users are registered in BiblioMaker's Addresses file, usually as Readers.

If you publish your catalog on the web and offer an online reservation or account consultation service, it is essential that users have a password to log in.

A user's record contains a Password loans field, automatically filled in by the software when the file is created. Depending on software settings (defined in Address file options, accessible via the Action>Options command, General button then Password tab), the password is automatically assigned according to one of the following rules:

• Assign the same password to each user : This method has the advantage of simplicity, but is not very secure, as a user could manage to log in as another user using this “universal” password.
• Assign the reader code : This method is also simple enough to communicate the password to the user, but its security is also weak, since it could be easily abused.
• Assign a random password : This method is the most secure. However, it requires the unique password to be communicated to the user so that he can use it (see below).

In the options dialog, constraints can be imposed, such as minimum password length and the obligation to combine numbers and letters.

You also have the option of assigning a password to users whose account was created before the program automatically filled in this field: select the user records concerned, then call up the Action>Apply command, target Password loans and choose one of the three rules above for assigning passwords.

Although you have the option of doing so, we don't recommend assigning a password manually, as this generates a lot of work.

Bear in mind that the password you assign is generally not permanent, as users can change their password online if they wish. So don't hesitate to impose strict constraints on password length (6 characters being a minimum) to limit the risk of misuse favored by the use of a short password.

To send users their password, select them in the Addresses file, call up the print command and choose the Password letter print format. In the options for this format, choose the delivery mode (e-mail or print for mailing) and letter/email text.

In the online catalog, users must log in with their code or e-mail address and their password to access their account or to reserve a document online. If they have forgotten their password, they can request assistance, which will be sent to them by e-mail.