Account and security
Kubby opens with a local account for each Windows user. You sign in with your password and the 6-digit code from an authenticator app.
Account
The account is kept on this computer, in your Windows user profile. The password and recovery codes are stored only as a strong hash (Argon2id). The authenticator key and session are in Windows Credential Manager.
Signing in
- User name, password and the code from your authenticator app.
- A sign-in lasts 8 hours; reopening Kubby within that time does not ask again.
- After 5 wrong attempts in a row Kubby makes you wait before the next try, and the wait grows each time.
If you cannot reach your phone
On the sign-in screen choose Use a recovery code and sign in with your password and one of the 10 recovery codes you got when you created the account. Each code works once. You are then asked to set up the authenticator again.
Profile menu
The icon with your initials at the top right: your name and user name, Notes, setting up the authenticator again and signing out.
Your data
- Your cluster data never leaves your computer. Kubby only asks kubby.tech for a newer version; there is no telemetry.
- Argo CD tokens, AI keys and the authenticator key are kept in Windows Credential Manager. Imported kubeconfigs are files in
%APPDATA%\Kubby\kubeconfigs, in your Windows profile. None of them is written to logs. - Application logs are daily files; only the last 5 days are kept.