My Account
The Account page (/admin/account) manages your own profile and admin preferences — separate from site settings and unrelated to your admin role. Everyone signing in sees it (editors and admins both).
What’s on it
- Change password — requires your current password plus a matching confirmation. The new one must be at least 8 characters with upper, lower, and digit. On success your password-change timestamp is recorded and every other session you have is invalidated — other devices are logged out while the browser you’re typing in stays connected.
- Password expiry status — when password expiry is configured site-wide, the page shows a countdown (“Password expires in N days”) or an expiry warning once it lapsed. This page is also the destination for the “change it now” flow: while a password is expired, the account page and its password form are the only admin pages reachable until the change is complete.
- Profile — display name, timezone, and avatar URL (the display name replaces your username in the interface masthead where configured).
- Admin theme — the admin interface’s visual style; pick from the shipped options (dispatch, paper, library). Saved immediately and kept into future sessions.
- Interface language — a per-user choice of the admin languages the instance ships. Saves a session-wide preference for your account only.
- Email address — set or clear the address your account is associated with (used for review/approval notifications, if configured).
- SSO — where your account was created by SSO, the provider shows here.
- Invalidate this account on other devices — the “log out everywhere” control ends every signed-in browser except the current one (so you never boot yourself out of your current tab).
Failure modes to expect
- Wrong current password on the change-password form — rejected before anything changes.
- Passwords don’t match / invalid — the usual mismatch and complexity messages.
- Unsupported language choice — the selector shows only configured admin languages; an unusual choice is refused with a flash.
Keep in mind
- Every change here is authentication-scoped to your own account — no users, no roles, no site settings reaching into this screen; those functions live on their own pages.
- Password changes by an admin on your account (or your being suspended) also invalidate sessions; the invalidate-sessions control on this page affects only what you own. 事实【theme audit Tensor】 CF.