How can we help?
Guides, troubleshooting steps and answers for Winfrasoft products. Ask a question, browse the articles below, or open a ticket.
Autothenticator
- Passkeys in Autothenticator Autothenticator keeps passkeys synced end to end across your devices or in one device's secure hardware, with a fingerprint, face or PIN for every use.
Autothenticator
- The Autothenticator vault: encryption and unlocking How the Autothenticator vault is protected: per-account AES-256-GCM keys under a random vault key, plus an Argon2id-stretched passphrase and device secret.
Autothenticator
- Autothenticator and your privacy No ads, tracking or analytics in Autothenticator. Free users never create an account, and sync accounts hold only encrypted data Winfrasoft can't read.
Autothenticator
- Autothenticator platforms and apps Where Autothenticator runs: Chrome, Edge and Firefox extensions, Safari on Mac, iPhone and iPad, and a native Android app, with the same features on each.
Autothenticator
- Autothenticator Business and Enterprise Autothenticator for organisations: Business adds company sign-in, an admin console, policies and shared team accounts; Enterprise adds a company key service.
Autothenticator
- Autothenticator editions Compare Autothenticator editions: Free covers everything on one device with no account, Pro adds encrypted sync, Business and Enterprise add team admin.
Autothenticator
- What Autothenticator is Autothenticator is Winfrasoft's 2FA authenticator. It fills one-time codes for you, only on the site each account belongs to, and stores passkeys too.
Autothenticator
- Codes from text messages on Android On Android, Autothenticator fills one-time codes from text messages without SMS permission by default. Each text is read once and never stored or sent.
Autothenticator
- Importing and exporting accounts Import accounts into Autothenticator from Google Authenticator, Aegis, 2FAS, Bitwarden, 1Password and more, on the device itself, and export them any time.
Autothenticator
- Syncing Autothenticator across devices (Pro and Business) Pro and Business sync Autothenticator across devices through an end-to-end encrypted relay that holds no key to your data. Changes arrive within seconds.
Autothenticator
- Moving phones, backups and recovery Move your Autothenticator vault to a new phone with a QR code, keep encrypted backups, and get back in with your recovery kit if you lose every device.
Autothenticator
- Autothenticator quick answers Short answers about Autothenticator: whether you need an account, what's free, whether Winfrasoft can see your codes, recovery, and why a code won't fill.
Autothenticator
- Filling codes only on the right site (phishing protection) Each Autothenticator account is bound to its own sites and apps, so codes fill only there. On a lookalike phishing site it fills nothing and warns you.
Autothenticator
- What if…? Autothenticator security scenarios What an attacker gets in each case, from a stolen Winfrasoft database to a lost phone or a hijacked email account: Autothenticator's security model.
X-Forwarded-For for IIS
- X-Forwarded-For for IIS system requirements Which IIS and Windows Server versions X-Forwarded-For for IIS supports, how the filter runs, and which proxies, load balancers and CDNs it works behind.
X-Forwarded-For for IIS
- Configuring the Proxy Trust List How X-Forwarded-For for IIS uses its Proxy Trust List to log the real client IP and ignore forged headers, and how to set it in XFF4IIS.ini.
X-Forwarded-For for IIS
- Logging the real client IP in IIS behind F5 BIG-IP IIS behind an F5 BIG-IP logs the SNAT address, not the visitor. Enable Insert X-Forwarded-For on the HTTP profile and log the real client IP in IIS.
X-Forwarded-For for IIS
- SharePoint behind a reverse proxy: the real client IP SharePoint web front-ends behind a reverse proxy log the proxy address, not the visitor. How to get the real client IP into c-ip across a WFE farm.
X-Forwarded-For for IIS
- IIS custom field for X-Forwarded-For not working X-Forwarded-For custom log field in IIS missing, empty or full of dashes? The nine causes, starting with the log file name change nobody expects.
X-Forwarded-For for IIS
- How to log X-Forwarded-For in IIS Log X-Forwarded-For in IIS: the custom log field on IIS 8.5+, Advanced Logging on IIS 7-8, the PowerShell method, and why the column does not fix c-ip.
X-Forwarded-For for IIS
- IIS client IP for SIEM and compliance SIEM connectors, geo-IP lookups and compliance parsers all key off the IIS c-ip field. Why a custom X-Forwarded-For column does not satisfy them.
X-Forwarded-For for IIS
- Logging the real client IP on IIS behind ARR With IIS Application Request Routing (ARR) as a reverse proxy, backend IIS logs the ARR server IP. Log the real client IP using the X-Forwarded-For header.
X-Forwarded-For for IIS
- ASP.NET Core UseForwardedHeaders behind a proxy UseForwardedHeaders still seeing the proxy IP? Why KnownProxies and KnownNetworks reject it, why ForwardedHeaders__KnownProxies__0 is ignored, and .NET 10.
X-Forwarded-For for IIS
- Logging the real client IP in IIS behind Cloudflare IIS behind Cloudflare logs the edge IP, not the visitor. How to log the real client IP from CF-Connecting-IP, True-Client-IP or X-Forwarded-For.
X-Forwarded-For for IIS
- Barracuda and IIS 10: the Advanced Logging route is gone Barracuda's IIS instructions start with Microsoft Advanced Logging, which no longer exists. What still works on IIS 10, and what it will not fix.
X-Forwarded-For for IIS
- X-Forwarded-For and IIS IIS does not read X-Forwarded-For natively, in any version including IIS 10. What the header holds, why c-ip shows your proxy, and the options you have.
X-Forwarded-For for IIS
- Logging the real client IP in IIS behind Barracuda IIS behind a Barracuda WAF or Load Balancer ADC logs the appliance, not the visitor. Barracuda sends X-Forwarded-For by default: log it in IIS c-ip.
X-Forwarded-For for IIS
- Logging the real client IP in IIS behind Akamai Akamai sends X-Forwarded-For by default and True-Client-IP only if enabled. Which to log in IIS, why True-Client-IP can be forged, and how to fix c-ip.
X-Forwarded-For for IIS
- Logging the real client IP in IIS behind an AWS load balancer An AWS ALB or ELB makes IIS log the load balancer's private IP. Read X-Forwarded-For and record the real visitor IP in the standard c-ip field.
X-Forwarded-For for IIS
- Logging the real client IP in IIS behind Nginx or HAProxy Nginx and HAProxy do not forward the client IP by default. Add X-Forwarded-For with proxy_set_header or option forwardfor, and log it in IIS.
X-Forwarded-For for IIS
- X-Forwarded-For and IIS: frequently asked questions Common questions on logging the real client IP in IIS: the c-ip field versus a custom column, CF-Connecting-IP, X-Azure-ClientIP and spoofing.
X-Forwarded-For for IIS
- How X-Forwarded-For for IIS licences work X-Forwarded-For for IIS licences are files: no activation server, no call-home, fine on air-gapped servers. How evaluation and non-production use work.
X-Forwarded-For for IIS
- Which client IP header does your proxy send? Which client IP header each proxy sends: X-Forwarded-For, CF-Connecting-IP, True-Client-IP, X-Azure-ClientIP, C-IP and X-ARR-LOG-ID, and which to log.
X-Forwarded-For for IIS
- Exchange behind a load balancer: the real client IP Exchange behind an F5, NetScaler or Azure Application Gateway logs the load balancer, not the client. How to fix the OWA and ActiveSync audit trail.
X-Forwarded-For for IIS
- Replacing the F5 X-Forwarded-For ISAPI filter on IIS 10 F5 archived its X-Forwarded-For ISAPI filter and HTTP module in 2016. Microsoft says neither works on IIS 10, and neither validates the header.
X-Forwarded-For for IIS
- Logging the real client IP in IIS behind Azure App Gateway / Front Door IIS behind Azure Application Gateway or Front Door logs the Azure IP. Use X-Azure-ClientIP or X-Forwarded-For to log the real visitor in c-ip.