Register devices for unlock approval notifications

Push notifications help approvers notice manual unlock requests quickly. They are a convenience for approval workflows; they do not authorize unlocks by themselves.

Register a notification device

Register each browser from the device that should receive notifications.

1. Open the Panocrypt console.
2. Open the account menu from the sidebar footer.
3. Choose Notification devices.
4. In Settings → Notification devices, choose Enable on this browser.
5. Give the device a recognizable name, such as Ops phone or Chrome on laptop.
6. Accept the browser notification prompt.

The notification device appears in the list with its name and registration date. Advanced delivery details stay out of the main list.

Register a phone from a desktop

The Notification devices section and the Add device Policy step both include Set up mobile notifications when you want to register a phone or mobile browser.

Use Set up mobile notifications when you are working from a desktop but want a phone to receive unlock requests. Panocrypt shows a QR code and a link to the same Settings → Notification devices section for the active organization. Open that link in the phone’s browser, sign in, then register that device from there.

You do not need to copy operating-system-specific instructions from this page. Use the console’s mobile setup prompt for the current device and browser.

When notifications are used

Notifications matter when a device requires manual approval before it can complete a managed unlock.

For example:

• An approval group covers a device through its required tags.
• The covered device attempts to unlock through Panocrypt.
• The request passes the configured source and lifecycle checks, then waits for manual approval.
• Panocrypt notifies the approvers registered for that workflow.
• An approver reviews the request in Manual unlock and chooses Approve, Deny, or Defer.

Approval is still governed by Panocrypt policy checks. A push notification only gets the approver’s attention and opens the approval flow.

Test delivery

After at least one notification device is registered:

1. Open the account menu.
2. Choose Notification devices.
3. In Settings → Notification devices, choose Send test notification.
4. Confirm the test appears on the registered browser or phone browser.

Test notifications are display-only. They do not approve, deny, defer, or simulate an unlock request.

If a test fails for one device, remove that stale notification device and register it again from the browser that should receive notifications.

Remove a notification device

Open Settings → Notification devices, find the device name, and choose Remove. Removing a notification device stops Panocrypt from sending push notifications to that browser.

Removing a notification device does not remove the user from approval groups and does not change any device’s unlock policy. If the same person should no longer approve manual unlock requests, update the relevant approval group or user access separately.

Notification boundaries

Push notifications do not:

• Store or release disk keys.
• Replace Panocrypt’s unlock policy checks.
• Bypass source allowlists, lifecycle state, temporary deny decisions, or manual approval rules.
• Guarantee that a server will boot or unlock.
• Lock, wipe, or change a running host.