Holdfast
Partner
You are signed in. This page cannot pair or approve yet. The partner server address is empty. After the Cloudflare worker is deployed, set REMOTE_BASE in config.js and reload. Sign-in stays on this account.
This page is not a public partner link. Sign-in is not configured yet. Set the Firebase web key, the project id, and the server address in config.js, then reload. A person who only has this URL cannot approve an Unlock.
Sign in with the partner account. The same email works in any browser if this phone is lost. This page does not keep the signing key. The server signs Unlock, Lock, Allow protection off, and Allow uninstall only for the account linked to the phone.
Use at least 8 characters. This is not a subscription. A later payment check can use this same account.
Locked
No Unlock is active on this phone's clock
Scanned/linked.
You are signed in. Scan the pairing code from Holdfast, or paste it below. It is a one-time invite, not a signing key. After Submit, this account is scanned/linked to that phone. Another browser with this same account can still approve later.
The code and the QR are the same pairing key. It pairs once. Delete the message after you link.
Paste a one-time code they texted you. It is the same code as their QR. It expires in 5 minutes and works once. Submitting it creates a new Unlock or Allow protection off code. It does not reuse an old code, and it does not pause the phone by itself.
Approve an Unlock when they need a pause, lock protection again, or allow protection off. The phone applies it within a minute when a server is set. The QR is the backup. The code expires in 5 minutes and works once. A timed Unlock turns back on by itself and does not allow uninstall. Allow protection off does not allow uninstall.
The Android Partner app is optional. This page does the same job.
Sign out leaves the account link in place. Sign in again on any browser to keep controlling that phone.
This code expires in 5 minutes. It works once. After it is used, it is invalid. Ask for a new one.
They can scan the QR or paste this code on Holdfast. A remote command uses the same code and does not stay valid.
Sync status
On the blocker, open Settings and show the status code. Scan it here, or paste it. That replaces the clock on this phone with the blocker's.