Signing In and Out

111 Aufrufe Markdown

Use sign-in, two-factor authentication, password reset, and sign-out correctly to access the panel securely and recover access when it is lost.

Opening the Screen

The sign-in form is printed at the admin directory address, {admin}/. It has no address of its own: while you are signed out, any panel address answers with the form, and you land on the page you asked for once you are in.

The directory name is chosen during installation and is part of the address. Keep it to yourself - it is the first thing that keeps unwanted visitors off the panel.

What Is on the Screen

Three screens belong to this flow, and each one leads to the next.

Two-factor step Appears only when your account has an authentication method enabled: a six-digit code, or a recovery key.

Password reset Reached from "Reset Password": an e-mail address is asked for, and the message that arrives opens the new-password screen.

Fields

Email The address on your administrator record. It is the account's identity, not a display name.

Password Your own password. Nobody, including a full administrator, can read it back to you; a forgotten password is reset, never recovered.

Remember Me Keeps the session on this browser after it would otherwise end. Leave it off on shared machines.

Verification code The six-digit code from your authenticator, on the two-factor step.

Recovery key Used in place of the code when you cannot reach the authenticator. It was shown to you once, when the method was enabled.

Tasks

Open the panel address and enter your e-mail and password.
Tick "Remember Me" only on a machine that is yours.
If your account has two-factor authentication, enter the six-digit code on the next screen.
The panel opens on whichever address you asked for.

Reset a forgotten password

Choose "Reset Password" on the sign-in screen.
Enter your e-mail address. The answer is the same whether the address is registered or not - it does not confirm who has an account.
Open the message that arrives and set the new password twice on the screen it opens.
Save; you are returned to the sign-in screen, and the old password stops working at that moment.

Sign out

Open the profile menu at the top right and choose to sign out.
The session ends on this browser. A session remembered on another device is not affected; end those from your account's security settings.

Things to Watch

Repeated failures lock the door for an hour

Twenty failed attempts from the same browser, or a hundred across the whole panel, close sign-in for an hour. The counter runs per hour and clears itself; there is nothing to unlock by hand. If it was you, reset the password instead of trying again.

The error message is deliberately vague

A wrong address and a wrong password produce the same sentence, and the reset screen answers the same way for an unknown address. This is on purpose: the panel does not tell an outsider which addresses have an account.

Blocked and inactive accounts say so

If the account exists but has been blocked or set inactive, the panel says that instead of "wrong password". Ask a full administrator to look at the account rather than trying other passwords.

Required Privileges

Signing in needs no privilege - it is what your privileges are read from. What you see afterwards is decided by your privilege group.

War das hilfreich?

Vielen Dank für Ihre Rückmeldung!

Brauchen Sie weitere Hilfe?

Unser Support-Team ist rund um die Uhr für Sie da, wenn Sie oben nicht fündig werden.

Kontakt aufnehmen Ticket eröffnen