CrewAuth · Controlled pilot

Operator portal

Signed out

Secure sign in

Enter your organization, email and password.

Organization access

Invite team member

CrewAuth creates a one-time setup link. The team member chooses their own password and enrolls their own authenticator MFA.

Add crew · Step 1

Find the professional first

Search CrewAuth before creating a new identity. This prevents duplicate professionals when someone already works with another operator.

or search by exact identity

Crew portrait

Add or change crew photo

Required global CrewAuth professional portrait. JPEG, PNG or WebP. The same portrait follows this person across linked operators. Large phone photos are resized automatically. Changing it requires revoking any live credential first.

Identity proofing

Confirm crew identity

External passport/NFC verification is being integrated separately. Manual operator proofing below is not an external IDV result and does not create a reusable global verification.

Credential replacement · irreversible

Reissue Crew ID

Replace the selected active or suspended Crew ID with a newly signed document and pass number. The old credential becomes permanently revoked; its online and offline QR will fail verification. The Professional receives a token-free email link to the native iPhone app.

Lost phone warning: Reissuing does not revoke Professional Account passkeys or sign out a stolen iPhone. Secure the account separately before treating a lost device as resolved.

Legacy holder access only

Reset legacy browser holder access

This resets the legacy browser holder binding only. It does NOT reissue or revoke the native Crew ID, nor revoke a Professional Account passkey or native offline device key. For a new document use Reissue Crew ID; for a lost phone separately secure the account.

In pilot/production this sends a token-free iPhone app reminder, not a new browser enrollment link. It does not secure a lost device.

Permanent action

Revoke credential

Revocation cannot be reversed. The verifier will reject this credential immediately.