Skip to main content
There are two ways to start with Bastion. Pick the one that fits.

​
Option A — Managed (nothing to install)

If your organization uses a managed Bastion workspace, you only need to sign in.
1

Open the app

Use the web app in your browser, or install Bastion for desktop, iOS or Android — see Download.
2

Sign in with your email

Enter your email address. Bastion sends a one-time code — no password to remember. The same account works on every device.
3

Start talking

Open a chat or start a call. Everything is end-to-end encrypted by default — see Security.

​
Option B — Self-hosted (your own server)

Run the whole platform on a server you control. You’ll need a host with Docker and a domain name pointing at it.
1

Get the node

Pull the image or clone the node repository. Everything the platform needs — database, cache, file storage and the media server — is described in one docker compose setup.
2

Generate config and secrets

Strong secrets are created for you; the stack refuses to start if a required one is missing, so it can’t boot with a weak default.
3

Bring it up

HTTPS certificates are issued and renewed automatically. Your database and storage bind to localhost — only the parts that must be public are exposed.
4

Create your organization

Register the organization once, then invite members by email. Manage everything from the admin panel.
Prefer not to run anything yourself? The managed option is the same single-tenant stack, operated for you — one organization per instance. See Pricing.

​
Next

Self-hosting

Requirements, TLS, and how the pieces fit together.

Administration

Invite members, set roles, and configure retention.