The allowlist is the security boundary. The passcode is defense in depth on the phone: after /lock or a relock, ordinary messages do not reach the agent until you unlock.

​
Set it

telekit passcode set
telekit passcode status
telekit passcode clear --yes
The passcode is stored locally on this Mac. telekit never stores the clear passcode. It never forwards unlock text to the agent.

​
Unlock

You sendResult
/pwPrompt. Next plain text within 2 minutes is the passcode.
/pw <code>Verify now.
Bare passcodeOnly in the 2-minute window after a lock prompt.
Unlock lasts 1 week on the current profile / user / node / thread / harness lane. /lock locks immediately and sends the prompt. Five wrong guesses → lockout for 5 minutes.

​
Relock knobs

CommandDefaultMeaning
telekit passcode relock-on-newoff/new does not lock.
telekit passcode relock-on-restartonDaemon bounce locks every lane. off restores unexpired unlocks.
telekit passcode relock-on-node-switchon/node switch locks. off carries remaining TTL.
telekit passcode relock-on-thread-switchon/thread switch locks.
Changing harness carries the current unlock forward.

​
Deletion

telekit tries to delete the Telegram message that contained the passcode. That is not a guarantee. Notifications, other devices, exports, and screenshots may still have seen it. If delete fails, the reply says so.

​
Locked-safe commands

/pw /lock /new /stop /x /status /s /session /sessions /restart /help /ping /whoami /claim /start. /skill is not locked-safe.