Sign in

cogaine

myteam

A self-hosted instance, run by emir. Registration is invite-only. There is no password, ever: accounts are key-based. Sign in with a passkey, or approve this browser from a workspace you already enrolled.

Shows a short code here; from any workspace enrolled as you, run cog login approve <code>. The workspace's device key approves it, and this browser signs in as that account.

Use a one-time sign-in token instead

Tokens are the fallback for first-admin bootstrap and lost-credential recovery. An admin mints one:
cog admin user login-token <account-id>
It signs this browser in as that account and is consumed on use.

Sessions are a signed cookie: the server stores nothing.

Whoever runs this instance

…can read every project you push here, and can obliterate content with a second maintainer's authorization.

…cannot read your Box. Account secrets are encrypted to your keys; the server only holds ciphertext.

…cannot stop you leaving. cog export --all works for any account, at any size, at any time.

We put this on the sign-in screen because you should know it before you sign in, not after.