Signing in and first steps

The sign-in page

You reach the web interface in a browser at your installation’s address, https://redact.example.com/en/auth/login for example. All current browsers are supported (Chrome, Edge, Firefox, Safari).

The sign-in form has three fields:

Field	Meaning
Tenant	The tenant’s code (slug). System administrators enter system here.
User name	Your administrator account, admin as delivered.
Password	Your password, admin as delivered.

With “Stay signed in” the session lasts 30 days; without the tick it ends when the browser is closed. At the top right you will find the language switch (nine interface languages) and the theme switch (light or dark).

Example — the first sign-in after installation:

1. Open the sign-in page.
2. Enter Tenant = system, User name = admin, Password = admin.
3. Click “Sign in”.

Security notice

For failed sign-ins the system deliberately shows the same message every time, “Invalid user name or password.” — regardless of whether the tenant code or the credentials were wrong. After too many failed attempts, rate limiting kicks in (“Too many attempts. Please wait about a minute …”).

The enforced password change

On the first sign-in with the default admin/admin account, the system enforces a password change — you are taken straight to the “Change password” page and cannot skip it.

Enter the current password and the new password twice (at least 8 characters). Where the password policy in force is violated, it is shown as a message, for example:

• “The password must be at least 8 characters long.”
• “The password must contain at least one uppercase letter.” (if configured)
• “The password is too common and easy to guess.” (if configured)

You control the policy for system administrators through the system settings with the Auth.Password.* prefix (see the chapter “System settings”).

Note

While the password change is still pending, the system REST API also refuses to create or list API keys (with the error “Please change your password first.”).

Navigation

After signing in you land on the dashboard. The sidebar on the left leads to every area of system administration:

Menu entry	Address	Content
Dashboard	/system	A live overview of the installation
My profile	/profile	Your own account and password
Tenants	/system/tenants	Creating and editing tenants, licences, impersonation
API keys	/system/api-keys	System API keys for automation
Settings	/system/settings	Installation-wide key-value settings
Proxy	/system/proxy	The outbound HTTP proxy
Detection (PII)	/system/pii/wordlists	Word lists and learning suggestions for PII detection
Audit log	/system/audit	A log of every system admin action
Demo mode	/system/demo-mode	Configuration of the public demo mode
Demo sessions	/system/demo-sessions	An overview of the demo sessions (visible only while demo mode is active)

The menu entries are grouped into the “System administration” and “Demo administration” sections. The switch at the very bottom of the sidebar collapses them into a narrow icon bar. You sign out through the user menu at the top right (“admin”).