From nothing to a server on your map.

Open Vigia for the first time and it asks for two things: your name, and a password of twelve characters or more — three or four words you will remember are easier to type and harder to guess than one clever word. Press the button and Vigia makes your key: an encrypted Ed25519 pair whose private half is sealed under that password and under this computer, in a folder of its own. There is no form on lockflare.com, no email, no card, and nothing is sent anywhere — which is why it works with the network cable unplugged.

Then Touch ID or Windows Hello, once. That is the whole door, and the same door every time Vigia opens: the password, then the sensor. A Mac with no sensor, or a laptop with its lid closed, falls back to the password and says so on screen. Five wrong passwords and the account stops answering for fifteen minutes.

One computer, one account: from then on the door asks that password and nothing else.

You are in, on an empty map. Add a server is one form: the address, the port, a name, a group, the login the shell should use — and Select License Slot. Every installation has ten slots from the start, listed as Slot 1 Available — Never expires and so on. Pick one and the box is a full Vigia server: Security Setup, System Setup, backups, the packages, the databases, the clusters, everything Vigia does to a box as root.

Only want the terminal? Choose No slot — add it as a terminal and the box goes on the map as a terminal — shell, Files, Tunnels, Snippets, History — with no slot and no limit. Add as many as you like; a terminal takes a slot on Edit whenever you want more from it.

Click the server, give it the SSH login you already use, and you are on the box. Nothing is installed on the server to make any of this work, now or later.

Setup → Encrypted Backup → Turn On…. Give it a passphrase and a folder that leaves this computer — a USB drive, a NAS share, a folder Dropbox, iCloud Drive or OneDrive keeps in sync — and Vigia seals everything it holds with AES-256: the whole map, the saved logins with the key files they open with, the certificates, the snippets, the flows, the diagrams. From then on it is rewritten within a minute of every change, beside your account and in that folder, and earlier versions are kept there too — Restore… puts one back. The passphrase cannot be recovered, so keep it where you keep the things you cannot lose.

On a new computer, or after a wipe, the door has Restore an account from a backup file: the file in that folder, its passphrase, a new password, and the whole account is back — same key, same servers, same logins, same slots. Nothing of it ever passed through LockFlare, so nothing of it can come from LockFlare.