Accounts and invites

The admin, inviting people, sharing books, open sign-up, forgotten passwords and locked-out admins.

Languages

The screens before sign-in open in the language this browser last used, and in English on a first visit. Joining takes two steps: the invite code and a language, which becomes the account’s language, then the username and password in that language. Each person changes their language on Profile and security.

Inviting people

New accounts need an invite. As the admin, open Server admin, then Create invite (optionally with who it’s for, valid for 1, 7 or 30 days). Send the link, or let them scan the QR code: they pick a language, then a username and a password, and they’re in. Each invite works once. You can revoke an unused one in the same list.

There is no email anywhere: people sign in with their username.

Anyone can share their own books with other people on the same server. In the book, open Book settings, then Members: type their username, pick a role, and Invite. They see the invite the next time they open the app and choose Accept or Decline; until they accept, they see nothing of the book.

Owner: everything, including members, the book’s settings and deleting it.
Editor: adds and changes accounts, transactions, categories, people and budgets.
Viewer: can only look.

Anyone can leave a book from the same screen. A book always keeps at least one owner: make someone else owner before you leave. How it works: Users and shared books.

On Server admin, New accounts: “Anyone who can open this server”. Only do this if the server isn’t reachable by strangers (for example, it’s only on your Tailscale network).

Signing out after inactivity

That’s each person’s own choice, not the admin’s: on Profile and security, Sign me out after inactivity (5 minutes by default, up to 60 minutes, or never, on all their devices, with a warning a minute before). There they also see where they’re signed in and can sign out a device.

Light or dark

Each person picks Same as the device (the default), Light or Dark on Profile and security. It’s kept in that browser, so a phone and a laptop can differ.

Forgotten passwords

Make them a Reset link on Server admin, Accounts, and give it to them yourself. It works once, for 24 hours; it sets a new password, turns two-step verification off (in case they lost their phone too), signs them out everywhere and forgets their remembered devices.

Disabling an account

Disable on the same list signs them out at once and stops them signing in. Their data and shared books stay; Enable gives everything back.

When the web app can’t help

Commands for whoever runs the server, in the folder they cloned:

docker compose exec waterflow python -m app.admin reset-password <username>   # a one-time reset link, admin included
docker compose exec waterflow python -m app.admin make-admin <username>       # a new admin

Two-step verification

Each person can turn it on in Profile and security with any authenticator app. They get ten recovery codes, each usable once instead of the app’s code. At sign-in, Remember this device for 30 days skips the code on that device, never the password. A new password, turning two-step verification off, a reset link and Sign out other devices (but the device doing it) forget remembered devices. How sign-in works in detail: Sign-in and accounts.