Set up your first device
No devices are enrolled yet, so there is nobody to approve an enrollment. The way in is the deploy log: Friday printed a one-time bootstrap code there at boot.
Add Friday to your authenticator
Scan or paste this into Google Authenticator. You will need a code from it for every future enrollment and to get out of lockdown.
Create your passkey
Print these recovery codes now
Shown once and never again — only hashes are stored. Each works once. A code plus a code from your authenticator is the only way out of lockdown that does not need server access.
Sign in
There is no password anywhere in this system.
New device?
On a device you already trust, open Settings and approve this code with your authenticator:
Lockdown
Every session is revoked and outbound email is frozen. Telemetry ingest keeps running.
- Enter one printed recovery code and a code from your authenticator.
- Register a fresh passkey on this device.
- Every other device must be enrolled again.
Lost the codes? Run npm run unlock on the server.