Request to Delete Unnecessary Accounts and Verify Passwords for ONION-object

Recently, security incidents resulting from unauthorized access and the unauthorized use of accounts have been occurring frequently, both in Japan and abroad.
As part of our security measures, we ask for your cooperation regarding the following four points.
 

Requests

    • Deletion of unnecessary user IDs
      • If you are the representative for a group application, please review the list of registered users and consider deleting user IDs of individuals who do not intend to use ONION-object in the future.
    • Password check
      • Please check whether you are using the same password for other services or have set a password that is easily guessed by third parties.
    • Consider setting up MFA
      • Multi-factor authentication is available for login. Whether or not to use multi-factor authentication can be configured on a per-user basis.
    • Deletion of unnecessary access keys and secret keys
      • If you have issued access keys and secret keys for S3 API access, please review their usage and delete any that are no longer needed.

 

Specific procedures

    Deletion of unnecessary user IDs

    • If you do not intend to use ONION-object in the future—due to graduation, resignation, transfer, the conclusion of research activities, or other reasons—please consider deleting your account.
    • Account deletion must be performed by the representative. If you are not the representative, please ask the representative to delete it.
    • Representatives should follow the procedure below to delete user IDs.

      •  

      • Procedures for the representatives
        • Clicking the "Search" button under "User Management" on the service's webpage displays a list of user IDs. Please click "Delete" at the far right of the row for the user ID you wish to delete.

     

    Password check

    • To prevent unauthorized access, please double-check that you are not using the same password as for other services and that your password is not easily guessable by third parties. If there is a possibility that your password has been reused or compromised, please change it immediately.

      •  

    • Individual group users can change their own passwords. If you are a group member and forget your password, please ask the representative to reset it.
    • Please refer to the following link for the procedure.
    • How to change and initialize a password (ONION-object): https://www.hpc.cmc.osaka-u.ac.jp/en/system/manual/onion-use/password/

     

    Consider setting up MFA

    • Users can individually configure their settings to use multi-factor authentication in addition to a password when logging in.

      •  

    • After logging in, please click the account icon in the top-right corner and select "Security Credentials". Please click the toggle switch in the "Multi-Factor Authentication" field within the "Sign-In Credentials" section to display a QR code and a secret key. Please register one of them in your authenticator app, then enter two consecutive 6-digit codes generated by the app into the designated input fields. Please click the "Submit" button to complete the registration.

     

    Deletion of unnecessary access keys and secret keys

     

    We apologize for the inconvenience and appreciate your cooperation.



    Posted : October 15,2026