Zero-Knowledge Guard Active
Account Portal Dev Console

Security Posture & Health

Comprehensive status of your HexStack identity safeguards and encryption barriers.

85
SECURITY SCORE

Strong Account Safeguards Active

Zero-knowledge session isolation and single-use step-up authentication are active. Complete 2FA enrollment to achieve maximum tier protection.

2FA Enabled Recovery Codes Ready Step-Up Verified

Password & Security Stamp

Rotate password and immediately terminate stale tokens across all other devices.

Two-Factor Authenticator

Protect high-privilege operations with TOTP apps (Google Authenticator, Aegis, 1Password).

Emergency Recovery Vault

10 single-use cryptographically hashed emergency bypass keys.

Active Sessions & Devices

Inspect active login tokens and perform global one-click revocation.

Password & Credentials Wizard

Dedicated 4-step security flow. Rotates root password and updates user security stamp.

1. Current Password
2. New Password
3. Step-Up Verification
4. Final Confirmation

Verify Current Password

Enter your existing password to initiate the credential rotation workflow.

Define New Password

Choose a resilient passphrase with minimum 10 characters.

Enter password...

Step-Up Verification

Elevated authentication required. Provide your 2FA code or single-use recovery code to issue a signed Step-Up Token.

Ready to Apply Credential Rotation

Applying this change will update your password, rotate your Security Stamp, and revoke all active sessions on other devices.

Notice: You will remain logged in on this browser session, but all other consoles and apps will require re-authentication.

Two-Factor Authentication (2FA)

Add a cryptographic second barrier using standard RFC 6238 TOTP authenticators.

Authenticator App (TOTP) is not configured

Use Google Authenticator, Aegis, 1Password, or Bitwarden to generate time-based codes for high-risk operations.

Single-Use Recovery Vault

Emergency bypass keys in case you lose access to your primary authenticator device.

Recovery Codes Available: 10 of 10

Each code can only be used once. Once used, it is permanently consumed from the cryptographic vault.

••••••••••
••••••••••
••••••••••
••••••••••
••••••••••
••••••••••
••••••••••
••••••••••
••••••••••
••••••••••

Active Devices & Sessions

Manage all active authentication tokens and remote connections.

Chrome on Windows (Current Session)

Active Now

IP: 127.0.0.1 • Connected to HexStack Authority (10.0.0.20)

Security Activity Audit Feed

Immutable log of security-sensitive events, Step-Up challenges, and authentication attempts.

Event IP Address User Agent / Device Status Timestamp
Loading audit trail...

App-Specific Profile Overlays

Isolated app nicknames, custom avatars, and in-app preferences without modifying your root identity.

Loading app profile overlays...