Manage your own account

My profile is the page where every panel user manages their own account. It works the same for every role and needs no capability. Two-factor sign-in is set up there too, and has its own guide: Set up two-factor sign-in.

Before you start

• Sign in. Open My profile in the sidebar, under Account. The page title is Profile.
• To change your email address, the node needs a working mail relay, because Hyperion sends a code to the new address. Configure it under Settings, Mail.
• The line at the top of the page is a verdict. It reads “Account protected” when two-factor is on and you have more than two backup codes left, and otherwise tells you what to fix.

Steps

Change your password

1. In the Sign-in group, find Password.
2. Type Current password, then New password (at least 8 characters) and Repeat new password.
3. Click Change password. The page shows “password changed — other sessions signed out”.

Every other device is signed out when the password changes. The browser you are using stays signed in.

Change your email address

1. In the Email group, type the New address and your Current password.
2. Click Send code. A 6-digit code goes to the new address. The page shows “Code sent to” followed by the address with part of it hidden.
3. Open the message and copy the code. It expires after 15 minutes.
4. Back on My profile, type the code and click Confirm new email. The page shows “Email changed”.

Until you confirm, Email shows “Change pending” with the time left, and your current address stays in force. Click Cancel change to drop it. If the message did not arrive, open Wrong address, or no email arrived? Send a new code, enter the address again and click Send code. A new request replaces the pending one.

Set a profile picture

1. In the Account group, under Profile picture, choose a PNG, JPG or WEBP file of up to 1 MB. A square image of at least 256 px looks best.
2. Click Upload. The page shows “Avatar updated”.
3. To go back to your initial, click Remove picture and confirm.

See and end your sessions

The Signed-in devices group lists every browser that can use your account right now, this device first. Each row shows a label such as Firefox on macOS, the IP address, when you signed in and when the session was last active.

1. To end one session, click Sign out on its row. The page shows “device signed out”. This device has no button.
2. To end everything, click Sign out everywhere and confirm. This ends every session, including the one you are using, and returns you to the sign-in page, which says “Signed out on every device, including this one.”
3. Ended sessions (N) lists sessions that were signed out or expired. A session lasts 8 hours from sign-in by default.

Before you use Sign out everywhere

Every session of your account ends at once, including this browser, and you sign in again from the start. Use it when you think someone else has your cookie, then change your password from the new session.

Ended sessions cannot be revived. Signing in again creates a new one.

Check that it worked

• After a password change, sign in with the new password on another device. Old sessions on other devices land on the sign-in page.
• After an email change, Email shows the new address as its heading and the Account group lists it under Email.
• Signed-in devices shows the number of active devices in its header, for example 2 active.

If it fails

• “passwords do not match”: New password and Repeat new password differ.
• “validation failed: current password is incorrect”: retype Current password.
• “validation failed: password must be at least 8 characters”: use a longer password.
• “conflict: no SMTP configured — configure Settings → Mail first”: the node has no mail relay yet, so no code can be sent.
• “couldn’t send verification email” followed by the reason: the relay refused the message. The pending change is cleared. Check Settings, Mail and try again.
• “validation failed: wrong code”: retype the code. After five wrong codes you see “validation failed: too many wrong codes — request a new email change” and must send a new code.
• “validation failed: verification code expired — request a new one”: the 15 minutes passed. Click Send code again.
• “validation failed: new email matches current email”: enter a different address.
• “unknown session”: the session you tried to sign out is already gone. Reload the page.