Sudo approval

Host User Run as Directory Executable Owner SHA-256 Expires

View script source

Snapshot read as the requesting user. The file can change before execution; sourced files and imports are not included. Control characters other than tabs and newlines are escaped.

Rejection reason (optional)

Register phone passkey

Allow password manager to replace a same-account passkey

Vault encryption canary

Encrypted vault

Replace an existing secret with this ID

Vault passkeys

Add a backup passkey that can unlock the same vault. Register it above first, then enroll it here: you confirm an enrolled passkey once and the new passkey twice.