HumanPass dashboard

Open HumanPass in the Valgix dashboard to manage customer-facing configuration.

Sites

A site groups one environment, public sitekey, allowed domains, verification settings, secret keys, analytics, and activity history. Use separate sites when applications need isolated credentials, domain policy, or analytics.

Sitekeys are public. A test sitekey starts with hp_site_test_; a live sitekey starts with hp_site_live_.

Overview

Overview shows recent verification traffic and aggregate outcomes:

• Challenges — challenge requests accepted for processing;
• Verified — responses successfully consumed by trusted backends;
• Failed — responses rejected during verification.

Use trends to spot integration problems or unusual traffic. Analytics do not replace your own application monitoring.

Settings

Open Settings to rename or delete a site. Deleting a site is destructive for new verification traffic; update or remove every integration before deletion.

Domains

Add exact or wildcard domains that may render the widget. HumanPass checks the canonical browser origin on the server. See Domains and actions.

Modes and settings

Select the presentation mode, challenge lifetime, response lifetime, and optional action allowlist. Publishing creates a new settings version used by new widget flows.

The default challenge and response TTL is 120 seconds. Shorter values reduce replay windows but can increase expiration for slower users or devices.

Secret keys

Create secrets for trusted backends and revoke old credentials after rotation. Plaintext is shown once; the dashboard cannot recover it later.

Activity

Activity provides a paginated, sanitized history of configuration changes. Use it to identify when domains, settings, or credentials changed without exposing plaintext secrets.