Setup & join links

1. Connect the auth host

   Set VELVET_AUTH_URL and VELVET_AUTH_ADMIN_TOKEN in the Velvet Guard environment.

   How
2. Make links work on phones

   Set VELVET_AUTH_PUBLIC_URL to the address phones open, e.g. https://auth.example.com.

   How
3. Enroll your own admin device

   Sign in with a phone instead of the break-glass token.

   Invite yourself
4. Add a second admin

   With a single admin, one lost phone locks Velvet Guard.

   Invite an admin
5. Create an organization

   Organizations keep each team's people, apps and rules apart.

   Create one
6. Invite the first person

   Send a personal invite, or share a join link.

   Invite someone

One link works everywhere: phone (PWA or native app), laptop, tablet. Android opens the 100% Rust native app automatically if installed.

1. Personal inviteA one-time link or QR code for one person, valid for 24 hours.
2. Join linkOne link per organization. Open: instant. Closed: they ask, you approve.
3. Org domainSign-in names ending in the organization's domain land there automatically.

Every phone holds its own device key. A passkey (Face ID, fingerprint) protects each approval on top.