# Register devices for unlock approval notifications

Push notifications help approvers notice manual unlock requests quickly. They
are a convenience for approval workflows; they do not authorize unlocks by
themselves.

## Register a notification device

Register each browser from the device that should receive notifications.

1. Open the Panocrypt console.
2. Open the account menu from the sidebar footer.
3. Choose **Notification devices**.
4. In **Settings** → **Notification devices**, choose
   **Enable on this browser**.
5. Give the device a recognizable name, such as `Ops phone` or
   `Chrome on laptop`.
6. Accept the browser notification prompt.

The notification device appears in the list with its name and registration
date. Advanced delivery details stay out of the main list.

## Register a phone from a desktop

The **Notification devices** section and the Add device **Policy** step both
include **Set up mobile notifications** when you want to register a phone or
mobile browser.

Use **Set up mobile notifications** when you are working from a desktop but
want a phone to receive unlock requests. Panocrypt shows a QR code and a link
to the same **Settings** → **Notification devices** section for the active
organization. Open that link in the phone's browser, sign in, then register
that device from there.

You do not need to copy operating-system-specific instructions from this page.
Use the console's mobile setup prompt for the current device and browser.

## When notifications are used

Notifications matter when a device requires manual approval before it can
complete a managed unlock.

For example:

- An approval group covers a device through its required tags.
- The covered device attempts to unlock through Panocrypt.
- The request passes the configured source and lifecycle checks, then waits for
  manual approval.
- Panocrypt notifies the approvers registered for that workflow.
- An approver reviews the request in **Manual unlock** and chooses **Approve**,
  **Deny**, or **Defer**.

Approval is still governed by Panocrypt policy checks. A push
notification only gets the approver's attention and opens the approval flow.

## Test delivery

After at least one notification device is registered:

1. Open the account menu.
2. Choose **Notification devices**.
3. In **Settings** → **Notification devices**, choose
   **Send test notification**.
4. Confirm the test appears on the registered browser or phone browser.

Test notifications are display-only. They do not approve, deny, defer, or
simulate an unlock request.

If a test fails for one device, remove that stale notification device and
register it again from the browser that should receive notifications.

## Remove a notification device

Open **Settings** → **Notification devices**, find the device name, and choose
**Remove**. Removing a notification device stops Panocrypt from sending push
notifications to that browser.

Removing a notification device does not remove the user from approval groups
and does not change any device's unlock policy. If the same person should no
longer approve manual unlock requests, update the relevant approval group or
user access separately.

## Notification boundaries

Push notifications do not:

- Store or release disk keys.
- Replace Panocrypt's unlock policy checks.
- Bypass source allowlists, lifecycle state, temporary deny decisions, or
  manual approval rules.
- Guarantee that a server will boot or unlock.
- Lock, wipe, or change a running host.