Your Daemonet is the identity provider
Connect this browser.
Keep authority at home.
1Man does not ask for an email address or password. This browser creates a non-exportable credential; a device already authorized in your Daemonet approves exactly what it may do.
Not connectedNo browser card is installed for this origin.
1
This browser
Create a local credential
The private P-256 key stays non-exportable in this browser. The public key and a one-time request can be shown to Daemonet for approval.
Only these exact services can appear in Daemonet Home. Your owner device rejects IDs not owned by the selected profile. Native WireGuard and browser-direct access remain distinct, explicit modes.
2
Your authorized device
Approve in Daemonet
Review the 1Man origin, credential fingerprint, expiry, and requested capabilities on your own manager. WebCrypto-only cards cannot approve purchases or administer a profile.
Manual enrollment request
Create a credential first.3
One-time return
Install the approved card
Paste the approval returned by Daemonet. 1Man verifies the authority signature and this browser proves possession before a session is created.
Connected browser
Managed infrastructure
Verified Access pass
Upgrade with Lightning
Purchase approval happens on a passkey-capable browser card or on your Daemonet device. 1Man requests an invoice from the operator’s watcher and only observes settlement; direct traffic is not part of the bill.
$1530 days · no renewal
Payments are final after settlement.