Server-managed sessions
Your authenticated state stays in a secure server session instead of browser-readable tokens.
Session-first security
Passwords are only the first checkpoint.
TTL Dashboard pairs secure session authentication with an authenticator-app challenge, so access is granted only after both checks succeed.
Compatible with Google Authenticator and other standards-based TOTP apps.
Sign-in sequence
Access, verified in order
- 01
Verify your credentials
Your email and password establish who is requesting access.
- 02
Complete the MFA challenge
Enter the current six-digit code from your authenticator app.
- 03
Start the session
Only then is the full authenticated session issued.
No full session before MFA. The second checkpoint is part of sign-in, not an afterthought.
Security foundations
Strong defaults, explained plainly.
Every part of the account flow has one job, so you always know what is being checked and why.
Standards-based MFA
Add a time-based code from Google Authenticator or another compatible TOTP app.
Short-lived challenges
Authenticator challenges expire quickly, limit attempts, and are consumed after a successful check.
Ready when you are