SpawnWP

Secure cockpit access

UsernamePasswordAuthenticator code or recovery code

Step 1 of 3 · Administrator

Create cockpit access

Use the one-time activation code from the installation report. Then choose the password used when signing in without a passkey; a TOTP or recovery code will also be required.

One-time activation codeAdministrator usernamePassword (14+ characters)

Used only when signing in without a passkey. A TOTP or recovery code is also required.

Step 2 of 3 · Two-factor protection

Add an authenticator app

Scan this QR code with any TOTP authenticator. Examples include 2FAS, Aegis (Android), Google Authenticator, Microsoft Authenticator, 1Password and Bitwarden.

QR code for the SpawnWP authenticator account

Cannot scan the QR code? Add an account manually with this secret:

6-digit code shown by the authenticator app

Create a passkey

After the code, your browser opens your system's security prompt. Choose Windows Hello, your phone, a security key, or your password manager, and don't close the prompt until the passkey is saved. This is the normal sign-in method.

No authenticator to hand? Skip now and add a passkey later from the cockpit — sign-in stays available with your password and authenticator code.

Step 3 of 3 · Recovery

Save your recovery codes

Each code works once, together with your password. They will not be shown again. Store them outside this server, preferably in a password manager.