Skip to main content
Version: Current

Sign-in and security

Fahrtenbuch has no self-registration: accounts are created by an administrator. You manage your sign-in methods under Profile › Security.

Signing in​

On the sign-in page you can use:

  • E-mail address and password, plus the two-factor code if two-factor authentication is set up for your account,
  • Sign in with passkey,
  • Sign in with Google or Microsoft, if the administrator has set it up and you have linked your account.

Keep me signed in keeps the session on this browser.

Which methods are offered depends on the server: an administrator can switch off TOTP and passkeys for the whole server (TOTP_ENABLED, PASSKEYS_ENABLED). Stored TOTP secrets and passkeys are kept and work again when the method is switched back on.

First sign-in​

If an administrator created your account, a short assistant guides you through your first sign-in:

  1. Password: set your own password; the temporary one stops working. This step cannot be skipped.
  2. Profile: check name and language.
  3. Link accounts (optional): link Google or Microsoft, if available on the server.
  4. Vehicles: your own vehicles and the ones shared with you.
  5. Done: pair the Android app.

If an administrator only requested a password change, just the first step is shown.

Forgotten password​

Forgot password? on the sign-in page requests a reset link for your e-mail address. The link opens a page where you set a new password (at least 8 characters); by default it is valid for 30 minutes. For privacy the page does not reveal whether an account with that address exists.

note

The reset link is delivered through a webhook the administrator configures (PASSWORD_RESET_WEBHOOK_URL, see configuration), not through the server's SMTP settings. If no webhook is set up, no link arrives – ask your administrator to reset the password instead.

Changing your password signs out all other sessions.

Two-factor authentication (TOTP)​

Set up two-factor authentication with an authenticator app under Profile › Security. After that, every sign-in with password or Google/Microsoft asks for the code. An administrator can require TOTP for your account or remove an existing setup; the secret itself is always set up by you.

Passkeys​

Passkeys let you sign in without a password, using your fingerprint, face recognition, a PIN or a security key. Under Profile › Security you can add, rename and delete passkeys.

Passkeys are bound to the server's domain, so the same passkey works in the web dashboard and the Android app. An administrator can disable passkeys for your account; existing passkeys then stay stored but cannot be used.

Google and Microsoft accounts​

If the administrator has set up sign-in with Google or Microsoft (configuration):

  1. Sign in normally and open Profile › Security › Linked accounts.
  2. Choose Link Google or Link Microsoft and sign in with that account.
  3. From then on you can use Sign in with Google/Microsoft in the browser and in the Android app.

Linking does not create an account: a Google or Microsoft account that is not linked to a Fahrtenbuch user cannot sign in. Two-factor authentication still applies. Unlink removes the connection.

Devices and sessions​

Profile › Devices lists all devices and browsers signed in to your account. Sign out a single device there, for example a lost phone.