Skip to main content

Anti-Phishing

The Anti-Phishing feature helps protect your users against phishing sites and phishing attempts while browsing with the VaultysHub extension. It can be configured both at the global organization level and individually for each user.

info

This feature is part of the Anti-phishing module. Without this module, the section appears locked, with a presentation of the module. See Pricing and Modules.

Global Configuration​

Accessing Extension Settings​

Go to Configuration → Extension tab.

00.extension-settings-overview

The page groups the features related to the VaultysHub browser extension. The Anti-Phishing Protection section is accessible via the dedicated menu.

01.anti-phishing-accordion

Enable Anti-Phishing Protection​

Click on the Anti-Phishing Protection section to expand it, then activate the switch Enable Phishing Protection.

02.anti-phishing-disabled

Enable this switch to activate Anti-Phishing protection for all users

Choose the Severity Level​

Once protection is activated, select the level of aggressiveness in the Severity menu.

04.anti-phishing-enabled

Choose the level of aggressiveness:
• 'Medium': a dismissible warning appears on unknown sites
• 'High': the warning is permanent, access to the site is blocked

Two levels are available:

LevelBehavior
MediumUpon arriving at a login form on an unknown site, users see a warning appear over the form. They can easily dismiss it and continue.
HighThe warning is permanent: users cannot dismiss it and therefore cannot log in to the unknown site.

Manage the Domain Blacklist​

The Blacklist allows explicitly referencing domains to block, regardless of the configured severity.

The blacklist lists the domains to be explicitly blocked. It is empty by default.

Enter a domain in the input field (e.g., malicious-site.com or *.malicious-site.com) and then click Add to include it.

Enter a domain to add to the blacklist (e.g., example.com or *.example.com), then click "Add"

The domain is added to the list. Click on the 'trash' icon to remove it.

Click on the trash icon to the right of a domain to remove it from the blacklist.


User-Specific Configuration​

It is possible to define specific Anti-Phishing settings for a user, independently of the global organization configuration.

Accessing a User's Profile​

Go to Users from the navigation bar, then click on the action menu of a user and select Profile.

09.users-list

10.user-profile-page

Extension Settings Tab​

In the user's profile, click on the Extension tab.

11.profile-extension-tab

The Anti-Phishing section displays a switch allowing you to activate settings specific to this user.

Enable this switch to use 'specific' Anti-Phishing settings for this user, independently of the global configuration

Enable the switch Activate Custom Anti-Phishing Settings to override the global configuration with settings specific to this user. The configuration is then done in the same way as for global settings: activation, severity level, and domain blacklist.

13.user-specific-anti-phishing-settings