Profile & Account Security

Your profile identifies you in TruCMS, and your password and two-factor authentication protect the admin panel. These pages are only for the account you are signed in with; to change someone else, use Users.

The Edit Profile page with name, username, email and about fields

Your profile: name, username, email address and a short description.

Where to find it

Click your picture at the top right of the admin panel. The menu offers Profile, Change Password and Two-Factor Authentication. Visitors and customers have a similar page in their own area — see Visitor Accounts & My Account.

Updating your profile

FieldWhat to enterWhy it matters
NameYour display name.Shown to other administrators, as the author of posts and in comments.
UsernameA unique handle.Must not match another user.
E-Mail AddressA valid, unique email address.Where TruCMS sends notifications and password-reset links, and the name shown in your authenticator app.
AboutA short description.Optional background about you.

Choose Save. Changing your profile never changes your role or permissions.

Changing your password

The Change Password page

Change Password: enter the new password, then save.

Enter the new password and choose Save. TruCMS requires at least eight characters. Use a password that you do not use anywhere else, and do not share one administrator login between several people: individual accounts make permissions easier to control and limit the damage of a lost password.

Two-factor authentication (2FA)

With 2FA switched on, signing in needs your password and a six-digit code from an authenticator app on your phone. Even if somebody learns your password they cannot sign in without your phone.

  1. Open Two-Factor Authentication from the profile menu.
  2. Scan the displayed QR code with an authenticator app (for example Google Authenticator, Microsoft Authenticator or Authy). If you cannot scan, type the Manual Key into the app instead.
  3. Type the current six-digit code from the app into Verify Code From App and choose Continue.
  4. TruCMS switches 2FA on only after the code is accepted. From the next sign-in the code is requested after the password.

Keep the setup secret private

The QR code and Manual Key can generate valid codes. Do not post them in screenshots, tickets or chat. If you change phones, disable 2FA first and set it up again on the new phone.

When 2FA is already on, the same page offers Disable 2FA. Disable it only when you intentionally want password-only sign-in.

Signing in and password reset

SituationWhat to do
I forgot my passwordOn the admin sign-in page choose Forgot password, enter your email and follow the link in the message. This needs working mail settings.
I lost my authenticatorAsk another administrator to edit your account, or see Troubleshooting.
The sign-in page shows a challengereCAPTCHA protects the admin login when enabled in Settings → General.

Permissions

The profile pages require the manage profile permission. If the shortcuts are missing from your menu, ask an administrator to review your role in Roles & Permissions.

Users · Roles & Permissions · First Admin Login