Unlock and authenticate
Unlock your vault so InFlow can use your saved credentials, then sign in to your account. The vault keeps credentials encrypted on your computer; signing in lets the CLI access your InFlow account.
Unlock your vault
inflow vault unlock
Create an InFlow vault PIN or passphrase:
Vault initialized and unlocked.On first use, InFlow asks you to create a PIN or passphrase. After that, enter the same PIN or passphrase to unlock your vault. If the vault is already unlocked, you can continue without entering it again.
Enter your PIN or passphrase in your terminal, not in the agent's chat. Do not save it in configuration files or environment variables, where other programs could read it.
Sign in to InFlow
Run this command, open the URL shown in your terminal, and enter the displayed phrase when prompted. Approve access in your browser to finish signing in.
inflow auth login
To identify the agent you are setting up, you can include a name in the login command. For example, this labels the request as Claude Code on the browser approval page:
inflow auth login --client-name "Claude Code"
✓ Successfully authenticated!
Credentials saved locally.--client-name is optional. Without it, the request is labeled InFlow. Replace Claude Code with the name of your agent.
When the vault locks again
By default, the vault locks after eight hours without activity and when your computer sleeps. If your agent reports that the vault is locked, unlock it in your terminal and retry the task.
If you prefer a shorter timeout, the commands below check the vault status and set it to lock after 15 minutes without activity. Locking on sleep remains enabled.
inflow vault status inflow vault set-policy --idle-timeout-seconds 900 --lock-on-sleep