Bohdan Triapitsyn
967704a9b9
* docs: add OpenChamber feature docs and translations Add 30 new docs pages covering OpenChamber-specific workflows and setup: OpenCode server, providers/models/agents, MCP, skills, commands & snippets, usage, projects, context, notes/todos/plans, scheduled tasks, project actions, preview, worktrees, multi-run, git & GitHub, magic prompts, git identities, mobile/PWA, security, notifications, voice, project icons, remote instances, desktop browser, updates, and three troubleshooting pages. Rebuild sidebar into eight task-oriented sections and translate every new page into all six supported locales (uk, zh-cn, es, pt-br, ko, pl). * docs: surface new sections on homepage and cross-link tunnels Add an Explore block to the docs homepage (all seven locales) linking to the new section anchors, and cross-link the Tunnels page to Security and PWA & Mobile.
38 lines
1.6 KiB
Plaintext
38 lines
1.6 KiB
Plaintext
---
|
|
title: Security
|
|
description: Protect the UI with a password and passkeys before exposing it.
|
|
---
|
|
|
|
# Security
|
|
|
|
OpenChamber gives access to your machine and your code, so lock it down before anyone but you can reach it. This page covers the UI password, passkeys, and what to know before exposing OpenChamber to a network.
|
|
|
|
## Set a UI password
|
|
|
|
Start OpenChamber with a password and the browser UI asks for it:
|
|
|
|
```bash
|
|
openchamber --ui-password be-creative-here
|
|
```
|
|
|
|
You can also set it with the `OPENCHAMBER_UI_PASSWORD` environment variable instead of putting it on the command line. After signing in, OpenChamber remembers the device for a while so you're not asked every time.
|
|
|
|
Always set a password if the instance is reachable by anyone else — especially over a [tunnel](/tunnels/) or the public internet.
|
|
|
|
## Passkeys
|
|
|
|
Once a password is set, you can add passkeys (Face ID, Touch ID, a security key) for quicker sign-in. Add them at **Settings → OpenChamber → Passkeys**.
|
|
|
|
Passkeys are tied to the current password. If you change or remove the password, saved passkeys are cleared and you'll add them again.
|
|
|
|
## Before you expose it
|
|
|
|
- By default OpenChamber only listens on your own machine (`127.0.0.1`). It takes a deliberate change to listen more widely, and you should set a password first.
|
|
- Prefer a [tunnel](/tunnels/) or a private network (like a VPN) over opening a port to the internet.
|
|
- If you put OpenChamber behind your own HTTPS server, see [Reverse Proxy](/reverse-proxy/).
|
|
|
|
## Related
|
|
|
|
- [Tunnels](/tunnels/) — the recommended way to reach an instance remotely
|
|
- [Reverse Proxy](/reverse-proxy/) — run OpenChamber behind your own server
|