Devices

Each device with the app has its own signing key — the device key. It signs encrypted exchange keys, bundle permissions and actions on devices. The order executor accepts them only with the signature of a device from the account's device list: signing in to the account from another device allows neither signing a bundle on your keys nor adding that device to the list. Connections belong to the group of your devices.

Device key. If the device has hardware key storage (TPM on Windows), the key lives in it and is not exported, and the passcode serves as its PIN. Without such storage, the key is a file protected by the system and the passcode; the "Security" window warns about this. The key is created at the first signature — for example, when adding a connection; the device that is the first to sign a connection of the account becomes the account's first device. One key per device — on Windows, that is the Windows user and the app's data folder — for all accounts. A device is the key, not the sign-in and not the address: signing in again, a new IP address and a VPN do not change it. The key is deleted together with the passcode — "Sign out" on the passcode screen or 10 wrong entries.

The "Devices" list — in the "Security" window: the current device with its number and your other devices with a "Disconnect" button. The number is the first 8 characters of the key fingerprint, the same on all your devices; neither the system, nor the IP, nor the device name is shown. The order executor confirms the list with its signature — the server cannot forge it.

New device. Connections added on another device cannot be signed from a new one until it is approved:

1. on the new device — "Approve this computer", the passcode; an 8-digit code appears, for example "1234 5678", valid for 10 minutes;
2. on the device where the connections were added — "Security → Devices → Approve a new computer", enter the code, the passcode.

The code is transmitted encrypted; the server does not see it. The number of wrong codes is limited: once it is exceeded, all pending codes are reset. Devices cannot be approved during a freeze.

Disconnecting — removing another device from the list, for example a lost one: "Disconnect" for that device and the passcode. After that:

• the disconnected device no longer signs anything;
• bundles it signed open no new positions until a device from the list signs them; closing and cancellations on them keep working.

The device you are working on cannot be disconnected from the list. To bring a disconnected device back — "New computer key" on it, then approval from a device on the list. Disconnecting is also allowed during a freeze; support does not disconnect devices.