Sign in with hmd
No password, no pasted team secret. We hand you a one-time device code; you run one command in a terminal where hmd is signed in, and your local HAID key proves who you are. The control plane then hands this page a short-lived session token scoped to your own teams.
hmd dashboard login …
The browser never holds a team secret — only a short-TTL, CP-signed session token kept in sessionStorage (gone when you close the tab). Your team_ids are derived server-side from your signature, so this page can only ever see your own teams. The token rides an Authorization header — never a URL, a log, or any third-party call.