Account security
Two-step verification
Section titled “Two-step verification”In Account (Conta), turn on two-step verification with an authenticator app (Google Authenticator, Authy, 1Password…). Keep the recovery codes in a safe place.
Passkeys
Section titled “Passkeys”Sign in without a password using your phone’s or computer’s biometrics, or a physical key. Register them in Account → Passkeys (Conta → Chaves de acesso).
Sessions
Section titled “Sessions”Account → Sessions (Conta → Sessões) shows the connected devices, with their location and last use. End any session you do not recognize.
SSH keys
Section titled “SSH keys”In Settings → SSH keys (Configurações → Chaves SSH), register keys to clone git@… repositories and to install the agent over SSH.
The private part is stored encrypted.
Panel secrets
Section titled “Panel secrets”Database passwords, tokens and channel credentials are encrypted with the server’s master key
(DEPANEL_CHAVES_MESTRAS). It never leaves the server.