Quickstart
1. Start the server
- Binary
- Docker
Download the latest release for your platform from GitHub Releases, then:
chmod +x autentico
./autentico start --auto-setup
docker run -p 9999:9999 -v autentico-data:/app/data \
ghcr.io/eugenioenko/autentico:latest start --auto-setup
The --auto-setup flag generates a .env with fresh secrets (RSA key, CSRF, token signing) on first run. On subsequent starts, the existing configuration is reused.
2. Create your admin account
- Browser
- CLI
Navigate to http://localhost:9999/onboard and create your first admin account.
You'll be redirected to the Admin UI. From there you can register clients, manage users, and configure settings.
./autentico onboard --username admin --password yourpassword --email admin@example.com
Credentials can also be passed via environment variables (AUTENTICO_ADMIN_USERNAME, AUTENTICO_ADMIN_PASSWORD, AUTENTICO_ADMIN_EMAIL).
For production, set AUTENTICO_APP_URL to your public HTTPS URL (e.g. https://auth.example.com). Secure cookies require HTTPS — pass --dev only for local HTTP development. See Configuration for details.
What's next?
- Registering clients — connect your app
- Authorization Code + PKCE — the standard OAuth2 flow
- Configuration reference — bootstrap, runtime, and per-client settings
- Authentication modes — password, passkeys, MFA