Kaya

Getting Started

First Login

Create the initial administrator and sign in safely.

When Kaya has no users, /login redirects to /setup. The setup form creates the first active Admin account; normal user registration is not available.

Create the administrator

  1. Open http://SERVER-IP:8080/setup.
  2. Enter the administrator's name, email address and a unique password of at least 12 characters.
  3. Submit the form, then sign in at /login.
  4. Confirm that the Dashboard and Admin-only navigation groups are visible.

Kaya stores passwords as Argon2 hashes. Login attempts are rate-limited in memory. Sessions use a signed, Strict SameSite cookie and a database activity record.

Enable two-factor authentication

Open the avatar menu, select Profile Settings, then use the security controls to enrol a TOTP authenticator. Save any recovery information outside Kaya. Secret Vault requires Kaya TOTP or a correctly configured OIDC MFA step-up.

Next, complete Initial Configuration.