> For the complete documentation index, see [llms.txt](https://doc-op.blurit.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc-op.blurit.io/2.15.0/blurit-on-premise/usage/manager-webapp/authentication.md).

# Authentication

Blurit Self-hosted uses `username` and `password` authentication.

## Sign in

1. Open the application and go to the Sign In page `/login`.
2. Enter your `username` and `password`.
3. Click **Sign In**, most users are redirected to the [Tasks list](/2.15.0/blurit-on-premise/usage/manager-webapp/tasks.md).

<figure><img src="https://1141784043-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FcRuVBwKJviaiQQZy6xLi%2Fuploads%2FPxy7C5HVw2UYaZu5AsCM%2Fsign-in-blurit-op.png?alt=media&amp;token=96aaf0ae-e4fd-4f52-ab79-81ddd5b784a1" alt=""><figcaption><p>Sign in page</p></figcaption></figure>

### Session

Your session is kept active via a secure browser cookie. If you are already signed in and visit the sign-in page, you are redirected to [Tasks list](/2.15.0/blurit-on-premise/usage/manager-webapp/tasks.md).

### Errors

If your credentials are incorrect, you will see:&#x20;

<figure><img src="https://1141784043-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FcRuVBwKJviaiQQZy6xLi%2Fuploads%2FZWWtjZfJeu1iRH9NFN8u%2Finvalid-credentials.png?alt=media&amp;token=8558d5fd-ea3d-4a53-8d14-3d32562f1ae5" alt="Invalid credentials"><figcaption><p>Invalid credentials</p></figcaption></figure>

For other issues, contact your `Admin`.

### Password management

* There is no Forgot password link on the sign-in page. Contact an `Admin` if you cannot sign in.
* A `Admin` can reset a user’s `password` from the [Users](/2.15.0/blurit-on-premise/usage/manager-webapp/users.md) section.
* Users can change their own `password` from their account settings into [My account section](/2.15.0/blurit-on-premise/usage/manager-webapp/my-account.md).
* New passwords must be at least `12 characters` and include `uppercase`, `lowercase`, a `digit`, and a `special character`` ``!@#$%&*?`.

### Roles

Sign-in is the same for all users. After authentication:

* `User` — standard access to the application.
* `Admin` — additional access ([Users](/2.15.0/blurit-on-premise/usage/manager-webapp/users.md) & [Groups](/2.15.0/blurit-on-premise/usage/manager-webapp/groups.md) management, [license](/2.15.0/blurit-on-premise/usage/manager-webapp/my-account/admin-view.md#license-and-documentation) and [services](/2.15.0/blurit-on-premise/usage/manager-webapp/my-account/admin-view.md#my-services)).

### Sign out

Use **Sign out** from the application header to end your session and return to the **Sign In** page.

<figure><img src="https://1141784043-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FcRuVBwKJviaiQQZy6xLi%2Fuploads%2FHthMVU7W8gTxSx27UwjQ%2Flogout.png?alt=media&amp;token=21ab4283-8fa4-4d48-85a7-961aa1c543f3" alt=""><figcaption><p>Sign out button</p></figcaption></figure>