Accounts & sessions

tnnl is invite-only — there is no public sign-up. A superadmin creates your account, and you manage your own password and sessions from either the CLI or the dashboard.

Getting an account

There is no public sign-up. A superadmin creates accounts; the new user gets a one-time password and sets their own on first login.

Log in and out

Logging in opens your browser to authenticate, then stores a session on your device.

$ tnnl login      # authenticate in the browser
$ tnnl whoami     # show who you are (alias: tnnl account)
$ tnnl logout     # end the session on this device

Change your password

Run tnnl change-password; it prompts for your current password and a new one.

$ tnnl change-password

Changing your password signs out other sessions

Changing your password signs out all your other sessions. The device you changed it on stays logged in.

Sessions

Sessions are per-device, last 30 days, and are revocable at any time. You can manage them from the CLI or the dashboard Sessions page.

$ tnnl sessions                 # list active sessions
$ tnnl sessions revoke <id>     # revoke one session
$ tnnl sessions revoke-others   # sign out every session except this device

The same controls exist on the dashboard, and the Account page also offers a "log out everywhere" action.

Delete your account

tnnl delete-account permanently deletes your account and closes all its tunnels, after an email and password confirmation. The same action is available on the dashboard Account page.

$ tnnl delete-account

Note