Your phones and their keys

Every phone that signs in to Opensolr Photos gets an API key of its own, never your account's master key. You see every such phone in Account › Devices on opensolr.com, and you can sign any of them out from there.

Sign in to opensolr.com, open Account in the top menu, then Devices (opensolr.com/admin/solr_manager/my_devices). The list shows every phone signed in through an Opensolr app, with:

• App and Device: which app, on which phone, such as Google Pixel 8;
• Version of the app;
• Signed in and Last seen, as mm/dd/yyyy hh:mm:ss;
• Access: Own key for a phone with a key of its own, Account key for a phone still on an older version of the app.

Tap Sign out on its row and confirm. Then:

1. The phone loses access to your account at once; the app on it asks to sign in again.
2. The phone's photo index gets new random credentials, so what the phone saved no longer opens it.
3. Your other phones, your master API key and your other indexes are not touched. The index and the photos in it stay in your account.

Use it when a phone is lost, sold or given away.

Versions of the app from before per-phone keys received the account's master API key. The first time the updated app opens, it trades that key for one of its own, by itself. Until then the row reads Account key: signing it out stops its notifications but not its access. To cut such a phone off at once, generate a new master API key in your Opensolr dashboard.

• Each new sign-in on the same phone issues a fresh key, and the old one stops working.
• A phone that signs in to another Opensolr account leaves nothing of itself behind in the first one.
• The key is kept on the phone encrypted with a key held by the Android Keystore. See the security model.