Authentication & User Management

Cloud Authentication

Authentication for Heaper cloud is done via your email address — you receive a one-time password as an email to verify your identity.

You can also generate a private/public key pair once you set up a self-hosted server on your client. Link this to your cloud account to log in with the key instead of email codes, though the email method remains available.

Self-Hosted Authentication

Self-hosted instances use public key authentication. Users log in with their seed phrase, which signs a challenge with the private key (the seed phrase is never sent to the server).

You can use the same account on multiple servers with the same seed phrase, letting you switch between different servers with one identity.

This setup allows fully decentralized authentication — every Heaper server can authenticate users without requiring an internet connection.

Important: Write down your seed phrase. It is the only way to regenerate your key pair if lost. A password manager is advised.

First-Time Setup (Self-Hosted)

1. Navigate to your instance URL and check the status page to see if it is ready
2. Sign up with your seed phrase — this becomes the admin account
3. Registration is disabled after the admin account is created — adding other users requires your approval