First sign-in and administrator account
Opening Trade for the first time after installation: open the link the installer printed, create the administrator account, then turn on two-factor authentication.
Open the address
When the installer finishes, the terminal prints the address. Copy the link after “URL” and open it in a browser. The link carries a one-time code for creating the administrator account. Keep it to yourself and don’t share it.
If you lose the link, run this command on the server to print it again:
curl -fsSL https://api.zmarketlab.com/install.sh -o install.sh && sudo bash install.sh --setup-linkThe browser warns that the certificate isn’t trusted
The installer requests a trusted certificate for the server’s public IP automatically. When it gets one, the browser opens Trade directly and you can skip this section. When it can’t, Trade uses a self-signed certificate, the terminal prints an extra TLS SHA-256 fingerprint line under the address, and the browser warns that the certificate isn’t trusted:
On the browser’s warning page, open the certificate details and find the SHA-256 fingerprint.
Compare it with the fingerprint the terminal printed.
If they match, continue. If they don’t, stop and don’t enter anything.
To switch to a trusted certificate or use your own domain, see Install.
Create the administrator account
The first time you open Trade, the page shows Set up the administrator account.
| Fields | |
|---|---|
| Username | 3–32 characters: lowercase letters, numbers and underscores, not starting with an underscore. |
| Password | 8–256 characters. Common passwords are not allowed. |
Accept the Terms of service and the Privacy policy, then choose Create and continue. The account is stored only on your own server, and a Trade has this one administrator account.
Next, connect an exchange.
Turn on two-factor authentication
By default, two-factor authentication is off. Once it is on, every password sign-in also asks for the 6-digit code from your authenticator app.
Open Sign-in & security in Settings, and choose Turn on under Two-factor authentication.
Enter your current password.
Scan the QR code with an authenticator app such as Google Authenticator or 1Password, or enter the key by hand. Finish before the time shown on the page.
Enter the 6-digit code the app shows. It confirms on its own once all digits are in.
Trade has no recovery codes. If you lose the authenticator, see Forgot your password or lost your authenticator.
Sessions and devices
A session expires after 24 hours without activity and lasts 7 days at most. Sign in again when it expires.
Up to 10 sessions can be active at once. Beyond that, the one that has been inactive longest is signed out.
In Sign-in & security you can see Current session, Other sessions and Sign-in activity, and sign out a single session. Sign out everywhere also signs out the device you are using.
Changing the username or password asks for the current password and signs out your other devices.
Repeated wrong passwords never lock the account; they only lengthen the wait before the next try.