linux-cloud-router/docs/account.md

Account

Your own account: your name, kind, names, e-mail address, whether you are an administrator and whether you are enrolled for one-time passwords. The Account and the Passkeys panel are side by side, with One-time passwords and, for VPN users, VPN profiles below them.

Actions

Each change but removing a passkey asks for your current password and, when you are enrolled, a code not already used to sign in.

• Change password (Account panel): opens a dialog for the current and the new password; the change signs you out.
• Enrol or replace an authenticator app: scan the QR code, then enter a code of the app. Removing the enrolment is left to an administrator.
• Add a passkey: the browser or your password manager creates a passkey for the router's name; each passkey has a label and the time it was added, and a remove icon.
• VPN profiles (VPN users), each after your current password and, when enrolled, a code:
  • Download the OpenVPN profile: a .ovpn file for an OpenVPN client, which signs in with your name and password.
  • Download the Apple VPN profile (IKEv2): a .mobileconfig that sets up the router's IKEv2 VPN on a Mac, iPhone or iPad. It also asks for a profile password, which the device asks for when you install the profile in System Settings (Mac) or Settings (iPhone, iPad).

Passkeys

Sign in with a passkey on the sign-in page uses a passkey the browser offers, without the name, the password or the code. Passkeys work on the Manager's HTTPS address on the router's name only. They sign in to the Manager and to the router's OpenID Provider, and open a shell on the Shell page in place of the password and code.