Security

Two-factor authentication (TOTP)

Add a second factor: your password plus a 6-digit code from an authenticator app (Aegis, 1Password, Google Authenticator…). Recovery codes cover a lost phone.

Your sign-off notices in chat

When the administrator switches on "Tell the approvers", requests that need your sign-off are emailed to you. Add your own chat channel and they arrive there too: paste an incoming-webhook address from Slack, Google Chat, Microsoft Teams or Discord. Only those services' addresses are accepted. The shareable JSON backup leaves this address out.

Backups

Everything you own, in one click. The JSON export covers every table and leaves out passwords, 2FA secrets, API-key hashes, the SMTP password, signing secrets and webhook URLs, so it can be shared; after restoring it on a fresh install, re-enter your webhook URLs, as you do signing secrets. The database file is the rawest possible backup on SQLite installs, and it stays private.

Download full backup (JSON) Download database file (SQLite)

×
Live demo — signed in as the admin, sample data resets hourly.
Own it — one payment →