Authenticator codes
Add TOTP account
QR scanning uses the browser decoder or the local jsQR fallback. QR secrets stay in this browser until you import the account.
Trusted devices
Sessions stay signed in for up to 90 days since their last authenticated use. Revoke any device you no longer trust.
Overview & users
Manage users, trusted devices and authentication policies
Create user
Share temporary passwords through a secure channel. Email OTP must be deliverable before the user can sign in.
Users
Security activity
Recent security and access events
System settings
Manage configurations without editing server files
Brand & identity
Shown in the application interface and system preferences.