Email and OpenRUM password

Email and OpenRUM password sign-in is always available. It does not depend on Google, GitHub, OIDC, LDAP, or the external-provider encryption key.

1. Create and keep the local Owner

   During the first production run, open /setup, enter the Bootstrap Token, and create the Owner with a work email and a password of at least 8 characters including an upper-case letter, a lower-case letter and a symbol. Store those credentials in your recovery vault and verify that they can sign in. An already initialized Instance cannot repeat setup.

2. Sign in

   Open the Console login page. Enter the email address and OpenRUM password, then select Sign in. The form remains available even when external providers are disabled. If a session expires, sign in again to return to the page you were viewing.

3. Set a password for an external account, if needed

   After your external account has access, open Account → Set OpenRUM password, enter and confirm a password of at least 8 characters including an upper-case letter, a lower-case letter and a symbol, and save it. You can then use email and this password to sign in locally. Set it before an Instance administrator role is granted; the same password is used for five-minute re-verification of sensitive actions.

Recovery path

If an external provider stops working, sign in with the local Owner account and open System Settings → Authentication to disable or repair the provider. Keep the Owner password available independently of your identity provider.

Choose another sign-in method