Create your account

Creating a Crunu account takes a few minutes. You start on the sign-up page with your email and finish in the app at app.crunu.com, where your keys are created in your own browser.

1. Enter your email

Type your work email on the sign-up page. The site sends you to the app with your email filled in. The email travels in the part of the address after #, so it isn't sent to any server along the way.

If you already have an account, sign in at app.crunu.com instead. To join an existing team, open the invitation link a colleague sent you. See Invite your team.

2. Confirm the email

The app sends a code of 6 digits to your email. Enter it in the app. The code is valid for 15 minutes, and you can try it at most 5 times. If no email arrives within a few minutes, check your spam folder or send a new code.

If an account with that email already exists, the email asks you to sign in instead. The app answers the same way in both cases, so nobody can use it to find out whether an address has an account.

3. Your name, your team and a password

• Your name is visible to your teammates and is written into your certificate.
• The team name becomes your organization in Crunu, where you'll invite colleagues. You can change it later in the organization settings.
• Password. The app generates a strong password for you and shows its strength. Keep it in a password manager. You can also type your own: it needs at least 12 characters.

Your password never goes to the server and can't be recovered by it. You can change it later if you know the current one.

When you continue, your browser creates your keys: the Secret Key, your account keys and your organization's keys. The server receives only public keys and ciphertext.

4. Save the Emergency Kit

The next screen is your Emergency Kit, a sheet with your Secret Key. You need the Secret Key, along with your password, to sign in on any new device.

• Choose Print or save as PDF, or Copy Secret Key.
• Tick I've printed the Emergency Kit or saved it somewhere safe, then Continue.

Keep the kit away from your devices. While it's on screen, the page doesn't lock itself for inactivity, so don't leave it unattended. Read more in Emergency Kit and Secret Key.

5. Your workspace

After the kit, the app prepares your workspace in your browser, using your organization's keys:

• your Personal project with an environment called my keys, for your own files such as ~/.aws/credentials. It isn't shared with your team;
• a starter project, my-first-project, with the environments development and production.

Then it opens Projects with the Getting started steps: create a project, add variables to an environment, invite a member, connect a machine or issue a token, and turn on a second factor.

6. Protect your account right away

Do these two things before you put real secrets in:

1. Turn on a second factor. Open Account, then Security, and add an authenticator app code or a passkey. Until you do, a new device can sign in with just your password and Secret Key.
2. Create a recovery code. In the same place, choose Recovery code, create one, and store it separately from your Emergency Kit. See Recovery code.

You may also want to set how quickly the app locks itself when you're away. See Lock and idle timeout.

What you have now

• An account whose keys exist only on your devices.
• An organization where you are the owner.
• Projects ready for your first secrets.

Next: Create your first project.