Configure JWT trust with WordPress and lock down this console.
First-time access: sign in as admin with password changeme, then change your password below.
Values must match your FLW Messenger Auth plugin (Settings → FLW Messenger).
Used by the public app at /app to open the WordPress login bridge. No trailing slash required.
Stored in MySQL messenger_settings (never commit secrets). Used by GET /api/v1/webrtc-config (JWT). One URL per line or comma-separated. Prefer TURN REST: same shared secret as coturn static-auth-secret; the API returns time-limited username and credential per user (HMAC-SHA1). If REST secret is empty, use static username and credential below.
Static TURN fallback (only if REST secret is not configured):
VAPID keys for browser notifications on new messages. Use Generate VAPID key pair to create keys in the browser, or paste keys from another tool. Set subject to a contact you control (usually mailto:you@example.com), then save.
Export downloads a JSON snapshot (messages, call metadata, users, push subscription endpoints). Store it securely. Purge permanently deletes messages and call sessions older than the cutoff (UTC). Run a dry run first to see counts.