Topic
Account & security
Profile, 2FA, sessions, and user branding.
Guides
Articles
Step-by-step write-ups for this topic.
- Register and verify emailRegister when toggle.reg_enabled. require_email_verification default on → pending until link (24h). Username max 20.View article
- Login and password resetLogin by email or username. Forgot password always returns ok; reset token 1h; success deletes all sessions.View article
- Social login (member view)Google/Facebook/X/Apple/VK when toggle.mrc + provider enabled. Settings shows Linked with... (no unlink UI).View article
- Account settings overview/account hub: Settings, Payments, Redeem, API, SFTP, Branding. Prefs need Save. Tabs hide by mods/plan.View article
- Change passwordPATCH profile password 8-128. Social-only can Set password without current. Does not revoke sessions (reset does).View article
- Two-factor authentication (member)Site two_factor mode: disabled/optional/mandatory. Disable blocked when mandatory. Disable keeps secret for re-enable.View article
- Active sessionsList and revoke sessions when mod_sec_session_list_editable on (default). Revoking current clears cookie.View article
- Direct download preferencePaid members can enable skipping prep/landing/captcha/countdown when toggle.member_direct_download is on.View article
- Public catalog opt-inEnable publicCatalogEnabled to publish /users/{username} when toggle.published_files_link is on. Default off.View article
- Account branding tab (member)Branding tab needs plugin + toggle.user_branding + tier/override. Free never. Logo max width/MB from settings.View article
- Tickets (member)Signed-in /tickets: create (15/hr), reply while open, bulk close. Closed rejects replies. Statuses new/open/closed.View article
- Contact form (member)Public /contact (guests OK). Categories technical/sales/billing. No attachments. Staff reply by email only.View article