Settings

Account

View your account info and update your password.

Username

-

Role

-

Change Password

Update Password

Multi-Factor Authentication

Loading MFA status...

Set Up MFA

Add this manual key to your authenticator app, then enter the 6-digit code.

Manual Key

Enable MFA Open App Link

Disable MFA

Active Sessions

Loading sessions…

Dashboard Preferences

Configure notifications, client refresh rate, and navigation layout.

Notifications

Enable notification badge updates Enable desktop (OS) notifications

Browser permission was denied. Reset notification permissions for this site in your browser settings, then try again.

Refresh Interval

Client refresh interval (seconds)

Navigation Layout

Sidebar Top Bar

Changes apply immediately on save.

Visibility

Hide navigation bar

Press Ctrl+\ to toggle anytime.

Save Preferences

Input Archive

Opt in to server-side retrieval for clients you can access.

Auto retrieve input logs for my accessible clients

When the global archive is enabled, online clients are polled and stored in SQLite so the keylogger page can search archived logs while a client is offline.

Save Preference

Notification Delivery

Configure where alerts and notifications are sent.

Webhook and Telegram Bot settings have moved to the Notifications page. Configure your personal webhook and Telegram bot there.

News & Updates

Stay up to date with the newest features, releases, and announcements.

Follow the official Overlord Telegram channel for the latest updates, changelogs, and feature announcements.

Channel: @kunta

Open on Telegram

Banned IPs

Unban blocked agent source IPs.

Refresh

Your role does not allow IP unban actions.

IP	Reason	Banned At	Action
Loading...

Build IDs

Review your builds, see how many agents have claimed each, and block a build to immediately disconnect any agent that connects with its tag.

Show all users' builds Refresh

Claim count is the number of unique agent fingerprints that have ever connected using a build's tag. Each unique host produces one claim. A claim count higher than the number of machines you actually deployed to suggests the build tag may have leaked.

Build ID	Tag	Status	Created	Claims	Action
Loading...

Wipe Offline Clients

Permanently remove all offline clients from the dashboard in one click.

Deletes every client currently marked as offline. If any of them reconnect later they will reappear automatically.

Wipe Offline

Loading access overview...

Security Policy

Admin-only global security controls.

Your permissions do not allow security policy changes.

Session TTL (hours) Max login attempts Login window (minutes) Lockout duration (minutes) Minimum password length

Password Requirements

Uppercase Lowercase Number Symbol

MFA Enforcement

Require MFA for admins Your admin account must have MFA enabled first. Require MFA for non-admins Applies to operator and viewer accounts.

Save Security Policy

File Transfer Limits

Bound temporary server disk usage for operator-to-agent uploads.

Agent-to-operator downloads are streamed and are not staged on server disk. These limits apply to temporary files under the server uploads directory and take effect immediately for new transfers.

Maximum file size (MB) Total staging quota (MB) Maximum active globally Maximum active per user Upload intent expiry (minutes) Staged file expiry (minutes)

Save Transfer Limits

TLS Certificates

Admin-only TLS source configuration. Changes apply after server restart.

Your permissions do not allow TLS setting changes.

Use certbot certificates in production runtime (NODE_ENV=production)

Let's Encrypt account email Certbot live base path Certbot domain folder Cert file name Key file name CA chain file name

One-click setup requirements: DNS for the domain must point to this server and inbound port 80 must be reachable.

Auto Setup Free SSL

Save TLS Settings

OIDC / SSO

Configure generic OIDC login for self-hosted identity providers.

Your permissions do not allow OIDC setting changes.

Enable OIDC login button

Login button label Default role for new users Viewer Operator Admin

Issuer URL *required Redirect URI *required

Client ID *required Client secret *required unless client auth method is none

No client secret is currently saved.

Scopes *required Client auth method Client secret POST Client secret basic None / PKCE only

Auto-provision allowed users Create local users after a successful provider login. Allow email linking Link to existing users only when you trust verified email claims.

Allowed email domains Allowed email addresses

Group Role Mapping

Group claim Admin groups Operator groups Viewer groups

Save OIDC Settings

Team Chat

Admin-only. Configure message retention for the team chat.

Message Retention (days)

Messages older than this will be automatically deleted. Set to 0 to keep messages forever. Max 365 days.

Save Chat Settings

Registration

Admin-only. Control how new users can register.

Registration Mode Off Open Key Required Approval Required Default Role Operator Viewer Max Users (0 = unlimited)

Default permission groups for new users

Newly registered users automatically join these groups. Manage groups on the Users page.

Loading...

Save Registration Settings

Registration Keys

Count Label (optional) Expires (hours, 0=never) Generate Export

Key	Label	Status	Created	Expires

Pending Registrations

Username	Requested	Status	Actions

No pending registrations.

Screenshot Thumbnails

Admin-only. Control automatic agent screenshot polling.

Each visible card or tile triggers one screenshot request to its agent on a refresh interval. With many concurrent users or thousands of agents, this can add up. Turn either off to reduce load — manual screenshot commands still work either way.

Dashboard live thumbnails

Auto-refresh the thumbnail on each visible client card on the Clients dashboard (~15s per visible tile).

Screenshot Wall page

Enable the /screenshots page. When off, the page returns 403 and the nav link is hidden.

Save

Input Archive Admin

Admin-only. Control server-side SQLite retention and retrieval limits.

Enable global input archive

Per-user opt-ins only take effect while this global switch is enabled.

Retention (days) Max file size (MB) Poll interval (seconds)

Save Archive Settings

Build Rate Limit

Admin-only. Prevent abuse by limiting build frequency.

Max Builds per Hour (per user) Max Concurrent (per user) Global Max Concurrent

Save Rate Limit Settings

Branding

Admin-only. Customize enterprise identity across navigation and sign-in.

Your permissions do not allow branding changes.

Product name Browser tab name

Browser tab icon URL

Upload image No file chosen

Navigation name Brand accent Icon class

Dashboard background image URL

Upload image No file chosen

Navigation logo URL

Upload image No file chosen

Navigation logo alt text

Sign-in logo URL

Upload image No file chosen

Sign-in logo alt text

Sign-in title Sign-in subtitle

Sign-in background image URL

Upload image No file chosen

Background image alt text

Footer text Support link text Support URL

Simple theme

Pick the main colors and corner style. Overlord builds the CSS for you.

Use simple theme

Accent Page background Cards & panels Text Corners Sharp Soft Round

Theme preview

Cards, text, and buttons

Your custom palette is shown here.

Primary

Reset colors

Changes are added to the managed block below. Your handwritten CSS is preserved.

Custom CSS

Max 50 KB. Reload any open page after saving to see the new styles.

Save Branding

Export & Import Settings

Backup or restore your Overlord configuration (notifications, security, TLS, appearance, auth tokens).

Export — Downloads a JSON file with all current settings and auth tokens.

Keep this file secure — it contains sensitive tokens.

Export Settings

Import — Restore settings from a previously exported JSON file.

Auth token changes require a server restart. Environment variables will still take priority.

Import Settings

Server Health

Memory usage, per-component breakdown, and process stats.

Force GC Refresh

Loading...

Uptime

-

RSS (Total)

-

Heap Used

-

External / Buffers

-

RSS memory breakdown -

Heap used External / Buffers Other (native, stack)

Components

Thumbnail Cache

Cached-

Cache size-

Pending frames-

Gen active / queued-

Capacity-

Connected Clients

In memory-

Online (<60s)-

Database

File size-

Server Profiler

Capture a short CPU sample and memory snapshot to find hot functions and heavy allocations.

3 seconds 5 seconds 10 seconds 30 seconds Run Profile CPU Profile

Captured

-

Process CPU

-

Samples

-

RSS Delta

-

Hot Functions

Function	Self	Samples

Memory Object Types

Type	Count

Hottest Stacks