Your Daemonet is the identity provider
Connect this browser.
Keep authority at home.
1Man does not ask for an email address or password. This browser creates a non-exportable credential; a device already authorized in your Daemonet approves exactly what it may do.
Not connectedNo browser card is installed for this origin.
- 1CreateLocal browser key
- 2ApproveYour Daemonet decides
- 3ConnectVerify the returned card
1
This browser
Create a local credential
The private P-256 key stays non-exportable in this browser. The public key and a one-time request can be shown to Daemonet for approval.
Authorize exact services (optional)
Only these exact services can appear in Daemonet Home. Your owner device rejects IDs not owned by the selected profile. Native WireGuard and browser-direct access remain distinct, explicit modes.
2
Your authorized device
Approve in Daemonet
Review the 1Man origin, credential fingerprint, expiry, and requested capabilities on your own manager. WebCrypto-only cards cannot approve purchases or administer a profile.
Manual enrollment request
Create a credential first.3
One-time return
Install the approved card
Paste the approval returned by Daemonet. 1Man verifies the authority signature and this browser proves possession before a session is created.
Connected browser