Authentication

Warden supports username/password login and optional Single Sign-On through Google or generic OpenID Connect providers.

Initial Setup

When you first launch Warden, you’ll be prompted to create an admin account. This is the only time a user can be created without an existing admin.

Requirements for the initial admin account:

• Username — lowercase, alphanumeric, dots, dashes, and underscores (max 32 characters)
• Password — minimum 8 characters, at least one digit and one special character

Logging In

Enter your username and password on the login page. Sessions last 30 days and are stored as secure, HttpOnly cookies.

Each enabled identity provider appears as a sign-in button on the login page. See SSO for details.

Changing Your Password

1. Click your avatar in the top-right corner
2. Go to your profile settings
3. Enter your current password and your new password
4. Save

When you change your password, all your other active sessions are automatically invalidated. Your current session stays active.

For a forgotten local password or total lockout, follow Password recovery. SSO passwords are managed by the identity provider; Warden does not add local passwords to SSO accounts.

Updating Your Timezone

From your profile settings, you can change your timezone. This controls how dates and times are displayed throughout the dashboard.

Brute-Force Protection

Warden automatically locks out repeated failed login attempts:

• Per IP — too many failures from the same address triggers a temporary lockout
• Per username — protects individual accounts from targeted attacks

In production, login is limited to 10 attempts per minute per IP. After that, you’ll need to wait before trying again.