Visitor Accounts & My Account

Your visitors can have their own accounts. With an account they can book, shop, open support tickets and keep their details up to date. This page explains what they see and which settings control it.

The My Account dashboard of a customer showing booking, ticket, order and payment summaries

The customer dashboard: totals for bookings, tickets and orders, then recent bookings, payments and orders.

Registering and signing in

Visitors register at /register and sign in at /login. Both pages use your logo and colours, and the account icon in the site header leads to them. The administration panel has its own sign-in page at /admin/login.

The public Create new account page with name, username, email and password fields

The registration page. Visitors are told they agree to your Terms of Use and Privacy Policy.

Screen	What happens
Register	The visitor enters name, username, email address, password and password confirmation. A short note links to your Terms and Privacy pages (choose them in Settings → General). The new account receives the Default User Role chosen there.
Email verification	TruCMS sends a message with a confirmation link. The visitor must confirm the address before using the account area, and can ask for the message again from the verification screen.
Login	Email and password. If the account uses two-factor authentication, a code from the authenticator app is asked for next.
Forgot password	The visitor enters their email and receives a link to choose a new password.
Social login	When you add Google or Facebook keys in Settings → General (login section), the sign-in and register pages show buttons for them. The settings page shows the exact return address to give to each provider.

The login page. The layout (full page with an illustration, or a card) is a setting.

Settings that control it

Setting (Settings → General)	Effect
Disable Auth	Switches off visitor registration and hides the account icon in the header. Administrators can still use the admin login. While it is on, the Default User Role setting is hidden.
Auth Layout / background image	Chooses the look of the sign-in pages: full page with picture or a centred card.
Default User Role	The role every new registration receives.
Social logins	Google and Facebook client ID and secret.
reCAPTCHA	Protects the login, registration, contact and admin login forms against bots.
Mail	Verification, password reset and notification emails need working mail settings.

Customers of Booking and TruCommerce

Customers of the Booking and TruCommerce modules use this same account. Their bookings, payments and orders appear on the dashboard and in the module’s own account pages.

The My Account area

Signed-in visitors reach their area from the account icon in the header (/user/dashboard). It has six tabs:

Tab	What it offers
Dashboard	Totals for bookings (total, upcoming, completed, refunded), tickets (all and open), API tokens, workspace members, and shop orders (total, paid, awaiting fulfilment, fulfilled), followed by recent bookings, recent payments and recent orders with links to the full histories. Parts that belong to Booking or TruCommerce appear only when those modules are installed.
My Account	Profile, password, two-factor authentication, browser sessions and account deletion (below).
Team	The visitor’s workspace and its members (below).
API Tokens	Create and delete access tokens (below).
Notifications	Messages from TruCMS about the account, such as ticket replies, with Mark as read, Mark all as read, Delete and Clear.
Support	Their support tickets.

My Account

My Account: everything a visitor can change about their own sign-in.

Section	What it does
Profile	Name, username, an About text and a profile image. Choose Update to save.
Change Password	Current password, new password and confirmation.
Two-Factor Authentication	Enable Two-Factor Authentication shows a QR code to scan with an authenticator app, and asks for a code to confirm. From then on sign-in asks for a code. The same page lets the visitor disable it again.
Browser Sessions	Lists the devices where the account is signed in, with the browser, system, address and last activity. The current device is marked This device. Use it to spot sign-ins you do not recognise, then change your password.
Delete Account	The visitor confirms with their password. The account is removed from the site, a goodbye email is sent that contains a link to re-activate the account, and the visitor is signed out. Staff can also restore the account from Trashed Users.

Team (workspaces)

The Team page showing the workspace name, an invite form and the member list

A workspace belongs to its owner and can have members with a role.

Every account has a personal workspace. The owner can invite people by email and choose their role, rename the workspace, and remove members; members can leave. Two workspace roles exist:

Workspace role	Allows
Administrator	Everything in the workspace, including creating and deleting API tokens.
User	Reading, creating and updating records, and creating tokens.

The owner can also create further workspaces with Create Workspace and switch between them. Workspaces are separate from the site-wide roles and permissions; they only organise what a visitor can share with their own collaborators.

API Tokens

API tokens let another application act for the workspace.

Open My Account → API Tokens.
Type a unique Name that tells you what the token is for, and choose Create.
Copy the token shown in the green box immediately. TruCMS shows it only once; afterwards only the name and Last used remain.
Delete the token when it is no longer needed.

Treat a token like a password

Anyone who has the token can act as the workspace. Keep it out of emails, screenshots and web pages, and delete it as soon as you stop using it.

What you manage as the site owner

See and edit every account in Users; restore deleted accounts in Trashed Users.
Decide what registered visitors may do through the default role.
Answer their requests in Support Tickets.
Style the sign-in pages and the My Account area through your theme; they follow the colours and fonts of Theme Options.

Troubleshooting

Symptom	What to do
Visitors cannot register	Check Disable Auth is off in Settings → General.
The verification or reset email does not arrive	Check Mail settings and spam folders. See the FAQ.
No Google or Facebook button	Both the client ID and the secret must be filled in. The return address shown on the settings page must be added in the provider’s console.
A customer lost their authenticator	An administrator can edit their account; if the problem persists, see the Troubleshooting page.
The Team or API Tokens tab shows “not found”	The account has no workspace yet. Accounts created through registration get one automatically; ask support to check accounts created in other ways.

Users · Profile & Account Security · Support Tickets · General Settings