Secure first-time setup
Updated 2026-09-08 · Pharos 0.5.10
The first administrator can only be created with the setup key. The web installer passes it to the setup flow. For a manual install, use the configured PHAROS_SETUP_KEY or read storage/app/private/setup-key after the application has generated it.
Keep this key private. Open the setup form and enter the key when requested. Alternatively, create the first administrator from the app directory with php artisan pharos:user [email protected] --name="Your Name". The command prints a generated password once. After an administrator exists, first-time setup is closed.
If setup returns a forbidden response, verify the key belongs to this installation. Do not remove setup protection or expose the application directory to resolve it.