Account

Self-service passwordless account security for DiyaOS users, admins, and tenant members.

Security profile Credentials, role posture, OTP cadence, and active scope.

Passkeys Register passkeys and FIDO security keys for this account.

Sessions Review scoped sessions and trusted device state.

Recovery Prepare lost-device and account recovery paths.

Preferences Security notification preferences and local fallback choices.

Logout End active local sessions by principal or session id.

Canonical Address

https://account.diyaos.com This is the production account-security entrypoint. Local development uses `/account` while the auth service remains the source of truth for credentials, sessions, recovery, and audit state.