Account Access and Authentication
WoowTech keeps your installation private by requiring everyone to prove their identity before they can do anything. This page walks through how that sign-in layer works and how to recover when it gets in your way.
The Sign-In Screen
Opening WoowTech drops you on a credentials form. Type in the username and password attached to your account, and you're through to the dashboard.
People and Permissions
The moment WoowTech finishes its very first startup, it sets up one owner account and hands it to you. That owner identity is the most powerful one on the system. Things only the owner can do include:
- Creating, editing, and deleting the accounts of other people
- Tweaking integrations and global system options (still being built out)
Worth knowing: for now, ordinary accounts wield exactly the same power as the owner. The ability to clamp down on what non-owner accounts may touch is planned but hasn't shipped yet.
Before you can manage other people's accounts as the owner, flip on Advanced Mode inside your own profile.
What You Can Do From Your Profile
Your profile lives behind the circular avatar tucked near the bottom of the sidebar. Click it and you'll find controls to:
- Swap out your password for a new one
- Switch multi-factor authentication on or back off
- Tear down refresh tokens, which forcibly signs out whatever devices held them
- Generate long-lived access tokens that scripts and external tools can authenticate with
- Choose your interface language and how dates and numbers are formatted
- End your current session
A refresh token that sits idle for 90 days gets cleaned up on its own. So when you need a token that won't quietly disappear, generate a long-lived access token instead of leaning on a refresh token.
Locking Things Down
Choose a password that's genuinely tough to crack — this becomes critical the moment your instance is reachable from beyond your home network. Switching on multi-factor authentication stacks a second checkpoint in front of would-be intruders.
Registering Another Person
Anyone with administrator rights can enroll a new person in WoowTech and spin up a login for them.
Renaming an Account
Want to alter someone's display name or their username? The basic information setup guide spells out the steps.
Other Ways to Authenticate
WoowTech isn't limited to plain username-and-password logins. Through configurable auth providers, it can defer to additional authentication systems as well.
Troubleshooting
Login Attempts Rejected From 127.0.0.1
Running the nmap device tracker? Its network sweeps can accidentally hammer the authentication layer. Tell the scanner to skip the WoowTech host's own IP so it never gets probed.
A Bearer Token Warning Pops Up
If you get a warning that a legacy API password arrived but was never set up, add an api_password entry beneath your http: configuration block and the warning goes away.
Informational Bearer Token Messages
These exist only to remind integration developers to modernize how they authenticate. From an end user's point of view they're noise — nothing for you to fix.
You Lost the Owner Password
When the owner credentials are gone for good, restart the onboarding flow to claw your way back in.
"Invalid Client ID or Redirect URL"
Hitting WoowTech from the public internet means you need an actual domain name — a raw IP won't clear the redirect validation. On your local network the rules relax: private ranges like 192.168.0.1 and the loopback address 127.0.0.1 work without issue.
Don't want to register a real domain? You can cheat locally by editing your machine's hosts file so a hostname of your choice points at your public IP.
Forever Stuck on "Loading Data"
Some ad blockers quietly break WebSocket traffic, and WoowTech relies on WebSockets to render. Disable the ad-blocking extension and the page should load through.
Account Access and Authentication
WoowTech keeps your installation private by requiring everyone to prove their identity before they can do anything. This page walks through how that sign-in layer works and how to recover when it gets in your way.
The Sign-In Screen
Opening WoowTech drops you on a credentials form. Type in the username and password attached to your account, and you're through to the dashboard.
People and Permissions
The moment WoowTech finishes its very first startup, it sets up one owner account and hands it to you. That owner identity is the most powerful one on the system. Things only the owner can do include:
- Creating, editing, and deleting the accounts of other people
- Tweaking integrations and global system options (still being built out)
Worth knowing: for now, ordinary accounts wield exactly the same power as the owner. The ability to clamp down on what non-owner accounts may touch is planned but hasn't shipped yet.
Before you can manage other people's accounts as the owner, flip on Advanced Mode inside your own profile.
What You Can Do From Your Profile
Your profile lives behind the circular avatar tucked near the bottom of the sidebar. Click it and you'll find controls to:
- Swap out your password for a new one
- Switch multi-factor authentication on or back off
- Tear down refresh tokens, which forcibly signs out whatever devices held them
- Generate long-lived access tokens that scripts and external tools can authenticate with
- Choose your interface language and how dates and numbers are formatted
- End your current session
A refresh token that sits idle for 90 days gets cleaned up on its own. So when you need a token that won't quietly disappear, generate a long-lived access token instead of leaning on a refresh token.
Locking Things Down
Choose a password that's genuinely tough to crack — this becomes critical the moment your instance is reachable from beyond your home network. Switching on multi-factor authentication stacks a second checkpoint in front of would-be intruders.
Registering Another Person
Anyone with administrator rights can enroll a new person in WoowTech and spin up a login for them.
Renaming an Account
Want to alter someone's display name or their username? The basic information setup guide spells out the steps.
Other Ways to Authenticate
WoowTech isn't limited to plain username-and-password logins. Through configurable auth providers, it can defer to additional authentication systems as well.
Troubleshooting
Login Attempts Rejected From 127.0.0.1
Running the nmap device tracker? Its network sweeps can accidentally hammer the authentication layer. Tell the scanner to skip the WoowTech host's own IP so it never gets probed.
A Bearer Token Warning Pops Up
If you get a warning that a legacy API password arrived but was never set up, add an api_password entry beneath your http: configuration block and the warning goes away.
Informational Bearer Token Messages
These exist only to remind integration developers to modernize how they authenticate. From an end user's point of view they're noise — nothing for you to fix.
You Lost the Owner Password
When the owner credentials are gone for good, restart the onboarding flow to claw your way back in.
"Invalid Client ID or Redirect URL"
Hitting WoowTech from the public internet means you need an actual domain name — a raw IP won't clear the redirect validation. On your local network the rules relax: private ranges like 192.168.0.1 and the loopback address 127.0.0.1 work without issue.
Don't want to register a real domain? You can cheat locally by editing your machine's hosts file so a hostname of your choice points at your public IP.
Forever Stuck on "Loading Data"
Some ad blockers quietly break WebSocket traffic, and WoowTech relies on WebSockets to render. Disable the ad-blocking extension and the page should load through.
Start writing here...