Users & groups

Accounts, groups, roles and quotas are managed from the admin interface.

Accounts & roles #

  • Two roles: user and admin.
  • Passwords hashed with Argon2id; per-user TOTP 2FA.
  • Groups to organise users and shares.
  • Per-user storage quotas.

Several accounts at once #

One browser can stay signed in to up to ten accounts at once, Google-style: each takes its own session slot, and the account panel switches between them instantly.

Sessions are independent: revoking, expiring or closing one leaves the others signed in. Signing out closes either the active account or all of them.

API tokens #

API tokens (with roles) allow programmatic access. Public sign-up can be enabled or disabled in the settings.

Note

On public routes, Kubuno never distinguishes "unknown email" from "wrong password": no information leaks.