There is no login. Your key is who you are.
An encrypted key file, whose private half only opens on your own computer, is what unlocks Vigia. It is made the first time you open the app — a name, a password, nothing else — and sealed under that password: not checked against anything, but what the key is encrypted under, so the file is noise to anyone who copies it or takes the computer. Touch ID or Windows Hello stands behind it. Nothing is sent anywhere to be checked, so there is no account to phish and no cloud to go down.
The door, in order
The password
Twelve characters at least — three or four words you will remember are easier to type and harder to guess than one clever word. It opens the key, and the key opening is the check: no server, no activation, nothing typed but the password. Five wrong answers and the account stops answering for fifteen minutes. More than one account on this computer? The door lists them by name.
Touch ID or Windows Hello
Asked once the key has opened, never before. A Mac with no sensor, or a laptop with its lid closed, falls back to the password; a Windows computer with Hello not set up does the same — and the screen always says which.
The map
Vigia opens on your servers. Being in is the authentication: no Touch ID per action. Root on a box is your saved password through sudo, sealed under your key.
The account is made on this computer
A name and a password, typed into Vigia, and the key is written on the spot: an Ed25519 pair in a folder of its own under Vigia's data folder, its private half sealed under the password and this machine's fingerprint. No form on lockflare.com, no email, no card. LockFlare never hears that the account exists.
Everything Vigia keeps is sealed
Saved logins, certificates and their keys, repository secrets, the mail server, API keys and your licenses live on your computer under your key's own signature. The file is useless to anyone who copies it.
Several accounts, one computer
Each person opens their own account; the door lists them by name. A session pins to its key and other keys' servers are never listed. A colleague's account opens their map, not yours.
Lock, without leaving
A button in the title bar blurs the console past reading and asks for the second factor to come back. The shells stay open, the jobs carry on, and nothing behind the blur can be typed into. Nothing dismisses it but the factor.
For the days something goes wrong
One page in Setup that is the documentation, with the button at the bottom — and one file that is the whole account.
The encrypted backup beside the key
One file beside your key holding everything Vigia has — the map, the boards, snippets, tunnels, templates, diagrams, clusters, the audit ledger, the certificate vault, the saved credentials and your licenses — rewriting itself a few seconds after every change. Sealed under a passphrase of your own: the path that works on a new machine. Save a backup file puts the key and this backup into one file you keep somewhere that is not this computer — a disk in a drawer, a folder that syncs. Restore an account from a backup file, at the door of any computer, brings it all back under a new password: same key, same servers, same logins, same slots.
A second computer
Restore the backup file there and it is the same account — or open a fresh one, since every installation has its own ten free slots. Vigia is free on every computer and nobody counts people.
The worst day
Computer gone, no backup file. The map and the saved logins are gone with it — LockFlare has never held a copy, and that is the point. The license and every slot key you bought come back from lockflare.com/license, sent to the address of the account after a six-digit code mailed there. Vigia sends nothing; the visit is the browser's.
Changing the password
Setup → The password of my account. The key is resealed under the new one on the spot; nothing else changes and nothing leaves the computer.
What LockFlare could not give back
Nothing operational, because nothing operational was ever sent: not a server, not a login, not a certificate. If you buy slots, LockFlare holds your email and the keys issued to it, and that is the whole of it.
A name, a password, and you are in
No account to create anywhere else. Ten servers free on this computer, forever.