# Protect your new workspace

> Create the owner password, connect an authenticator and save recovery codes.

Canonical: https://ownpost.fyi/docs/guides/owner-setup

## Before you begin

The setup token from your deployment and an authenticator app.

## Steps

1. Enter your deployment's SETUP_TOKEN in Protect your workspace.

2. Choose a password of 12–200 characters and repeat it. Save it in your password manager.

3. Scan the QR code with an authenticator app, or use the displayed setup key if scanning is unavailable.

4. Enter the current six-digit code to verify the authenticator.

5. Copy the one-time recovery codes to a secure place outside this workspace before continuing to Home.

## A practical example

Complete setup on your deployed HTTPS origin, save the recovery codes in your password manager, then sign out and sign back in with your authenticator. This checks access while the setup details are still at hand.

## Check the result

You can sign in with your password and authenticator, and have recovery codes available separately.

## Troubleshooting

A rejected setup token must match your deployment exactly. For a rejected authenticator code, check your device clock and use a fresh code. If setup may have completed after a network failure, try Sign in.

## Keep going

[Sign in and resume interrupted work](https://ownpost.fyi/docs/guides/signin)

[Set your timezone and posting routine](https://ownpost.fyi/docs/guides/timezone)

[Maintain your password, authenticator and sessions](https://ownpost.fyi/docs/guides/account)

## Related

- [Previous: Workspace settings](https://ownpost.fyi/docs/guides/configure)
- [Next: Sign in & resume](https://ownpost.fyi/docs/guides/signin)
