Operators
Account security
Open the account menu (your initials, top right) and choose Account settings. That page holds what protects your login — passkeys, an authenticator app, and devices signed in as you. These are yours, not the workspace’s. Nothing here changes what your teammates see.
For how sign-in itself works, see Sign-in & password.
Sign-in methods
| Row | What it does |
|---|---|
| Password | Change it without leaving the page. Other devices are signed out when it changes. |
| Connect or disconnect social sign-in. Hidden when your org uses SSO. | |
| Single sign-on | Shown when your organization controls this identity — nothing to configure here. |
Accounts with no local password (Google or SSO only) do not show password management.
Passkeys
Face ID, Touch ID, Windows Hello, or a hardware security key. Passkeys work on every sign-in path, and they are the strongest option Camper offers.
To add one
- Authenticators → Passkeys → Add passkey.
- Name it after the device that stores it — “MacBook Touch ID”, “YubiKey” — so the list stays readable.
- Your browser then asks for the fingerprint, face, or key.
Each row shows whether the passkey is Synced (available on other devices through iCloud Keychain, Google Password Manager, or similar) or Device-bound (this device only).
Remove asks for confirmation first. Removing a passkey from Camper does not delete the credential from your device — clear that in your OS or password manager too.
Authenticator app
Time-based 6-digit codes from Google Authenticator, Authy, 1Password, and similar apps.
Scope: Camper only checks these on password sign-in. They do not apply to email codes, passkeys, Google, or SSO. If your account signs in through an IdP, a passkey is the factor that will actually protect you on Camper’s side.
Setup runs in three steps:
- Confirm password — proves it’s you before a factor is added.
- Backup codes — save them (see below). You cannot continue until you confirm you have.
- Scan & verify — scan the QR code, or copy the setup key, then enter the 6-digit code.
The factor is only active once that last code verifies. Disable asks for your password and invalidates existing backup codes.
Backup codes
Ten single-use codes that get you in when you don’t have your phone.
- Copy all or Download .txt (
camper-backup-codes.txt) - Each code works once
- Shown once during setup — Camper cannot display them again
If you lose them, disable the authenticator and set it up again for a fresh set. If you lose both codes and authenticator, ask another owner or admin to help recover the account.
Store them somewhere that is not the phone running the authenticator.
Active sessions
Every device signed in with your account, with browser, IP address, and expiry. The one you’re using is marked This device and has no revoke button.
A session lasts 8 hours from last use. Using Camper during the day keeps it alive; leaving overnight or over a weekend signs you out.
- Revoke signs out one device
- Revoke others signs out every device except this one
Revoke anything you don’t recognize, then change your password.
Sessions also end when you change your password, and SCIM deactivation revokes a person’s sessions for that workspace immediately.