Accounts, sessions, and account removal¶
Create an account and sign in¶
Start at Sign up. Complete the displayed username, email, and password checks. The password policy accepts 8–72 bytes, rejects common passwords, and rejects identity-equivalent passwords. Unicode characters can occupy several bytes. The displayed strength meter is advice in addition to the acceptance rules.
The browser can offer configured external sign-in providers. Availability belongs to the server configuration. Do not assume that a provider listed in an older screenshot is enabled. A new account receives a homeworld through the game's enrollment flow.
Run tarmy to request device sign-in. Open the printed browser link, sign in, review the device, and approve it. The code expires after ten minutes. The client polls every two seconds. Approval gives that client a session for your account. Approve only the device you intend to connect.
/q closes the client but keeps the saved session. /logout ends the session, deletes the local saved token, and quits. tarmy --logout removes the local sign-in for the selected server. The installation guide lists storage paths, flags, and update behavior.
Account controls¶
| Web page | Available actions |
|---|---|
| Account | Account state and vacation controls |
| Password | Set or change a password with the required proof |
| Change the account email with the required proof | |
| Devices | Inspect and revoke sessions |
| Two-factor authentication | Enroll an authenticator, manage recovery codes, disable with proof |
| Providers | Connect or remove available sign-in methods |
| Discord | Link a Discord identity and set available notifications, when enabled |
| Delete account | Review, request, or cancel deletion |
Sensitive changes require the proof shown in the form. Provider-only accounts use the applicable proof path rather than an invented local password. Do not remove your last usable sign-in method. Revoking a device stops that session, including its Commander access.
Authenticator codes contain six digits and rotate every 30 seconds. The server accepts one adjacent time step on either side. Keep your device clock correct. Recovery codes are an alternative when the authenticator is unavailable. Store them privately and follow the page's one-use behavior.
Use Forgot password for recovery. A reset link lasts one hour. Request a new link if it expires. Delivery depends on the server's mail configuration. Never include passwords, recovery codes, or session tokens in a bug report.
Vacation¶
Start vacation from Account when your own active fleets have returned. Vacation lasts at least 48 hours. The page shows the earliest return time. Production stops during the entire vacation interval, including time when no client reads your worlds.
Vacation prevents your fleet dispatches and hostile dispatches against protected worlds. It also restricts allied defense participation. Existing construction and research are not documented as paused: the service does not freeze those queue clocks. The current build, research, and shipyard services do not apply a general vacation purchase ban. Check the known behavior limits rather than assuming all actions stop.
Discord linking¶
Sign in to the game first. Open Account → Discord and authorize the Discord identity you intend to connect. This is a link to an existing game account, not a Discord sign-in method for the game. A callback must return to the same signed-in browser session.
The separate Discord bot owns the link and notification preferences. The page shows the currently available switches. If the bot or link service is unavailable, the game can remain playable. Restart the link flow after an expired or mismatched callback. Unlinking removes the identity association. It does not delete the game empire. Bot roles and notification delivery need a reachable bot and its guild permissions.
Delete an account¶
Account deletion differs from abandoning one planet. The web page shows the consequences and requires confirmation. A request starts a 30-day grace period. You can cancel before the deletion sweep completes the removal.
Resolve active trades first. Transfer or disband an alliance you lead. Staff accounts need their elevated role removed before deletion. The request ends other sessions. During the grace period, the empire still exists and can be attacked. A deletion request is not vacation protection.
After final deletion, account-owned data follows the removal workflow. Messages and reports held by other players can remain with anonymized identity. Cancellation preserves the account if completed before final removal. Do not treat the grace deadline as an exact scheduler execution time.
Client settings¶
/settings shows the current server, identity, language, and theme. /settings lang en selects a language. Supported codes are en, de, es, tr, and ru. /settings theme ion selects a theme. Themes are ion, ember, mono, and paper.
Language and theme persist per server across restarts and logout. Item keys and command names remain English in every language. This documentation ships in English and Turkish. The language switcher keeps the same chapter where possible.