Admin settings

You are currently signing in with the server-side fallback secret environment variable. Switching to a per-user authenticator gives you a personal secret plus 10 one-time backup codes. The env-fallback remains as a safety net until you enable.

Scan with your authenticator app (or enter the secret manually), then confirm with a 6-digit code.

Per-user TOTP is active. Every admin login requires a code from your authenticator or a one-time backup code.