NepFI Control Plane

Authorised personnel only

Sign in

Use your email and passphrase, then the code from your authenticator app — or a passkey. New admins join through a one-time invite from a Super admin and enrol two-factor at first sign-in.

Session-only authentication with mandatory two-factor. Sign-in attempts are rate-limited and audited. No social sign-in, no self-service password reset.

All access is logged. Suspicious activity triggers an on-call page.

Lost access? Contact another admin — password reset is handled out-of-band, not by email.