`auth`

auth is the built-in password gate for lil-terminal: it authorizes a session, changes the terminal password, applies progressive delays after failures and can end the session with auth -e or exit.

SecurityVersion core 1.5.10StableAliases: exit

lil-terminal

pwd/sandboxdir 1 . -Fconfig/ data/ logs/ src/ tmp/authpassword •••••••• +auth -esession endedauth -a 3 -d 5 -k 9attempts 3 delay 5 min kill 9

Overview

Use auth to protect access to the terminal itself without adding an account service or remote activation. Password entry is hidden, only a hash is stored for terminal authorization, and the failure policy can be tuned independently.

Authorization protects the terminal, not the whole site

auth controls the lil-terminal session served by this installation; it does not replace authentication for the surrounding website or hosting control panel. The authenticated core requires kill, and an optional failure threshold can invoke it after repeated unsuccessful passwords.

Syntax

lil-terminal

auth [-p|-e] [-a <attempts>] [-d <minutes>] [-k <attempts>]

Reference

auth

authorize in the terminal

auth -p

change the terminal password

auth -e | exit

end the terminal session

auth -a <attempts>

set failed attempts allowed before each delay

auth -d <minutes>

set the base delay used for progressive lock periods

auth -k <attempts> @kill

set total failed attempts before @kill; 0 disables @kill

Default policy

The default policy permits three failed passwords per group, uses a five-minute base and invokes kill after nine persistent failures. Completed groups create delays of 5, 25, 125 minutes and higher powers. A correct login resets the persistent failure state.

Key format

The shared JSON file .lil.key stores auth.hash, auth.policy and auth.state. Changing the password preserves unrelated namespaces such as db.

Dependency

Authorized downloads preinstall kill. Installer treats it as a core requirement and refuses to remove it while authorization is present.

Security

The terminal authorization password never enters visible history and is stored only as a hash in the auth namespace. Other opt-in .lil.key namespaces, such as saved database connections, may contain their own sensitive state; treat the file as private. Missing or malformed auth key data fails closed. Several policy flags may be combined with spaces or a standalone | separator; negative values are rejected.

Interactive sandbox preview

Run the prepared examples directly on the page. Their results are prebuilt and shown in the browser; no terminal command is executed on the server.

Authorize in the terminal

Install and manage

Install the current compatible version. Choose Base for the complete feature set or Minimum for the reduced package; use upgrade to update a module that is already installed.

Base and Minimum are two packages of the same current module release, not separate command versions.

Built into the core

This command is part of the selected lil-terminal core and is not installed as an ordinary extension.

Examples

Examples are copyable command lines, not actions executed by this website. Review paths, permissions and destructive flags before running them on a real project.

Authorize in the terminal

auth

password  ••••••••
+

Change the terminal password

auth -p

password  ••••••••
+ password changed

Set failed attempts allowed before each delay

auth -a 3 -d 5 -k 9

attempts  3
delay     5 min
kill      9

End the terminal session

auth -e

session  ended

exit is the direct alias of auth -e; both end the same authenticated lil-terminal session.

auth