# First sign-in

Connect the standard edition to a running honk, create its administrator if needed, and check the backend status. Complete [Service management](https://doona.daeuniverse.org/en/service-management.md) first; lite users should follow [Connect doona lite](https://doona.daeuniverse.org/en/lite-connect.md).

## 1. Open the interface

From the gateway or a device on its LAN, open `http://192.168.1.1:9527/ui/`, replacing the address with your gateway's API listener address. For a hostname or a separately hosted interface, follow [hostname and origin access](https://doona.daeuniverse.org/en/install.md#other-origin).

On first use, with no saved backend profile, the interface discovers the API at the hosting address. If the form points at the wrong backend, select **Change backend URL**. Check [sign-in requirements](https://doona.daeuniverse.org/en/feature-requirements.md#req-sign-in) if discovery or authentication is unavailable.

Before signing in, use the upper-right controls to change the language, palette and color scheme.

## 2. Follow the form you see

| Form | Action |
| --- | --- |
| **Create the administrator** | Enter **Username**, **Password** and **Confirm password**, then select **Create and sign in**. |
| **Sign in** | Enter the existing administrator's **Username** and **Password**, then select **Sign in**. |
| **Token required** | Enter the backend's configured secret in **Token**, then select **Connect**. |

For a new account, use 1 to 64 ASCII letters, digits, underscores, periods or hyphens for the username, and 8 to 128 characters for the password. The password confirmation must match.

In token mode, use the **Token** field's show/hide control to check the entered secret before connecting.

![Administrator setup](https://doona.daeuniverse.org/screenshots/en/login-setup.webp)

## 3. Check the backend

1. Open **System status**. On a phone, choose **Activity** in the bottom bar first.
2. Check the lifecycle status and the **Engine** card. Confirm that the engine is honk and the version is the build you installed.
3. Inspect **Backend features**. Use [feature requirements](https://doona.daeuniverse.org/en/feature-requirements.md) to interpret unavailable controls.

Continue with [Route your first connection](https://doona.daeuniverse.org/en/tutorial.md) to add a subscription and test a proxy route, or use the [interface tour](https://doona.daeuniverse.org/en/tour.md) to find a page.

## If sign-in fails

| Symptom | Next step |
| --- | --- |
| The browser cannot open the page | Run `curl http://192.168.1.1:9527/api` on the gateway, replacing the IP. If it works there but the LAN browser cannot connect, check whether the gateway firewall blocks port 9527. If it fails on the gateway too, check the service and listener in [Service management](https://doona.daeuniverse.org/en/service-management.md). |
| The form reports no native API | Check [honk version](https://doona.daeuniverse.org/en/requirements.md#honk-version). |
| Administrator setup is refused | Check the allowed client addresses under [sign-in requirements](https://doona.daeuniverse.org/en/feature-requirements.md#req-sign-in). |
| Credentials are rejected or you forgot the password | Follow [sign-in troubleshooting](https://doona.daeuniverse.org/en/troubleshooting.md#sign-in). |

The authentication keys are documented in [Configuration](https://doona.daeuniverse.org/en/configuration.md). Do not put a password or token in a screenshot or issue report.