SECURE SESSION · HttpOnly BFF cookie · server authorization enforced
Sovereign control plane
StratoID / Control plane

My Security

Multi-factor authentication

Add a second factor to protect your sign-in.

Authenticator app (TOTP)

Scan the seed into Google Authenticator, 1Password, or any TOTP app.

Backup codes

One-time codes to sign in if you lose your authenticator.

Passkey & Security key (WebAuthn)

Register a hardware token (YubiKey) or platform passkey (Face ID / biometrics) for phishing-resistant sign-in.

Your factors

Active sessions

Devices and clients currently signed in as you.

SSH keys

Public keys projected to your authorized_keys on enrolled devices.