Screenshots
A tour of the plugin's UI. Everything below runs inside Jellyfin's own dashboard and login page — no separate app.
A live security-posture score with an actionable breakdown of every hardening factor (2FA coverage, admin protection, enforcement mode, audit-chain integrity, brute-force ban, HIBP checks, and more).
The login page gains Sign in with <provider> (OIDC/SSO), 2FA, and passkey buttons. The 2FA portal accepts a TOTP code or a recovery code, with an optional "trust this device" for 30 days.
| Login page | 2FA login portal |
|---|---|
 |
 |
Each user self-enrolls: scan a QR code with any authenticator app (or add a passkey / email backup code).
| Setup page (TOTP + passkey + email) | Scan-the-QR enrollment |
|---|---|
 |
 |
Per-user 2FA management, a tamper-evident login audit log, OIDC/SSO provider setup, and a full settings panel.
| Per-user 2FA management | Login audit log |
|---|---|
 |
 |
| OIDC / SSO providers | Settings |
 |
 |
Every screen — admin dashboard, setup, and login — is localized (English, German, Spanish, French, Italian, Japanese, Portuguese, Chinese). Example, German:
| Settings (Deutsch) | Login (Deutsch) |
|---|---|
 |
 |
New to the plugin? Start with Installation → First-Time Setup.