Administrator access

Sign in

Ropix runs on a single administrator account, held on the server. The password is stored as a bcrypt hash and can only be changed on the server itself. The session lives in httpOnly cookies, so page JavaScript can never read it.