Security operations

Security

Keep passwordless authentication, sessions, device posture, recovery, and break-glass ready without introducing passwords.

Authentication

Passwordless posture

3 items

DiyaOS login is passkey and FIDO first; OTP is only a supporting verification path.

Passkeys and FIDO keys Admins should keep platform passkeys and at least one backup credential path healthy.

OTP step-up OTP is used periodically, for recovery, and for high-risk administrative decisions.

Sessions and devices Review active sessions, device inventory, and revoke unsafe access.

Continuity

3 items

Recovery should be controlled, temporary, and auditable.

Lost device replacement Replace credentials with approval, OTP step-up, and audit evidence.

Break-glass Emergency access must expire and require after-action review.

Security policy Review WebAuthn, OTP, sessions, approvals, custom roles, and storage binding posture.

existing tools