Home/Features/Access control
security Module

Access control

Passwords are hashed with argon2id. Two-factor authentication uses TOTP. Teams have roles and fine-grained scopes. API keys can be limited to sites, servers, and IP ranges, with expiry and rotation. The audit log is tamper-evident. Every server action is an Ed25519-signed job, and the agent rejects anything else.

In the October 2026 product

Interface Preview

Designed for Speed and Granular Control

BoltPane // Access control
status: OK
Sign-in

Argon2id password hashes and TOTP two-factor authentication.

Teams

Roles and fine-grained scopes.

API keys

Limit keys to sites, servers, and IP ranges, with expiry and rotation.

Audit

A hash-chained audit log, and Ed25519-signed jobs the agent must verify.

Workflow

How Access control Operates Under the Hood

Direct daemon interaction without bloated intermediate database abstractions.

01. Configuration

Direct System Templating

Applies standard Linux configurations directly to service directories (/etc/nginx, /etc/php, /etc/systemd).

02. Execution

Isolated Security Boundary

Commands run under strict POSIX jail and user separation without exposing global root credentials.

03. Telemetry

Live Status Verification

Immediately checks systemd exit codes and tests socket availability to confirm zero downtime.

Ready to use Access control?

BoltPane is 100% free with no license keys or trial limits. Download and run the install script on your Linux VPS.