← All controls

43 Hardware-key break-glass super-admin

opennextin progressdonewon't do

The 20 Break-glass admin + offline backup codes account's second factor is a hardware security key that lives in a sealed safe — never in a drawer, never in daily use. Registering the key is the easy part: the control is the custody around it, so the key is removed only in a witnessed ceremony and any authentication with it fires an alert, because an account nobody uses has no legitimate sign-in.

Documentation: Security best practices for administrator accounts ↗ · Manage a user's security settings ↗

This is a process control — it is carried out offline, so there is no Admin Console walkthrough to show.