Account authentication
The Native self-service contract reuses the existing account session and requires completion of configured verification steps.
Identity & access
Your account. Your devices. Your decisions.
Identity ties a person’s account to authorized devices and account-owned services without treating network membership as permission to everything.
A layered relationship
AccountDevice identityNative admissionPrivate route.yura service
Account sessions authorize registration; device signatures authorize Native admission; service policies decide who can use a particular resource.
Device identity
Durable Ed25519 installation keys sign registration and admission challenges. They are distinct from WireGuard transport keys.
Revocation
Account-owned devices can be revoked, invalidating their credentials and active sessions and requesting transport-peer removal.
Project ownership
Studio’s staging contracts scope project operations to the owning account, with explicit access policies for private publication.
Connected by design
Identity is part of something bigger.
Account sessions authorize registration; device signatures authorize Native admission; service policies decide who can use a particular resource.
Manage device access separately from the websites and projects you own.