Skip to content

Your Account and Security

Open Profile from the user menu at the top right (the same menu has a Documentation link to this site). Profile has up to three tabs.

Your name and the Preferred mail client (Default, Gmail, Outlook, Yahoo or Zoho). It only decides what “Reply in email app” opens on a form submission: the provider’s own web compose window, or your system’s mailto: handler for Default.

  • Change password: enter your current password and a new one (at least 8 characters).
  • Two-factor authentication: enter your password to start, scan the QR code with an authenticator app, save the backup codes, and confirm with a code to turn it on. You can regenerate backup codes or disable it with your password. It supports TOTP and backup codes only. After enabling, sign-in asks for a code (or a backup code) once the password is accepted.

These apply to your own account as the deployment’s Owner. Managing other people’s roles is on the Users page.

  • Recovery codes: generate ten one-time codes that reset your password without email access, for the case where you are locked out and cannot receive a reset link. They are shown once and stored hashed. The page shows how many remain, and you can regenerate or revoke them. Redeeming one is described in Account and owner recovery. Generating or revoking needs your password again.
  • Transfer ownership: pick another user to become Owner. It is a swap: you become Admin at the same moment they become Owner, so there is never zero or two Owners. It needs your password re-entered and a confirmation.

The From identity for email sent from the CMS, such as form replies and the Email page. Fill in a Sender name and Sender email, or leave them blank to use the deployment’s default sender (EMAIL_FROM). When a sender email is set it is also the default Reply-To, so replies reach the mailbox your deployment presents itself as. Otherwise Reply-To is the staff member’s own address. A per-message Reply-To overrides both. Your email provider must be configured and the sender domain must be allowed by it: see Email.