Console
Accounts and access
Answers the question What do you do when an administrator loses the password or the phone with the second factor?
Accounts
The Users section creates console accounts. An administrator handles everything; a viewer only looks.
The server chooses the password of a new account and shows it once. At the first sign-in the owner sets their own.
The second factor
The second factor is turned on from the account menu: an authenticator app reads the QR code, and the same secret sits beside it as a string. The factor goes on once the app has confirmed a code.
The sign-in form always has the code field. Without a second factor, leave it empty.
Your own factor is turned off in the same place, and that asks for a current code.
The phone with the second factor is gone
If the phone with the second factor is lost, another administrator takes the factor off with the button in that person's row.
The password is gone
A lost password is reset only on the machine the Wyrd server runs on. If we host the server, support does it – write to them from the cabinet.
On a server installed on your side, run:
sudo systemctl stop wyrd
sudo -u wyrd wyrd -c /etc/wyrd/wyrd.toml --reset-password admin
sudo systemctl start wyrd
The command prints a new password once, turns the second factor off, closes that account's open sessions and requires a new password at the next sign-in.