How to manage your user account
Prerequisites
- An account you can sign in to (for the email, password, and two-factor tasks)
- An authenticator app, on your phone or computer (only for two-factor authentication)
You don't need any of these to reset a forgotten password. That task starts from the login screen.
Steps
Each task below is separate. Go to the one you need.
Update your email address
-
Go to Settings in the sidebar, then select Account.
-
Find the General Information card.
Your username and user role show here too, but you can't change them on this card.
-
Type your new address in the Email field.
-
Select Update.
If the address is empty or malformed, the message "A valid email is required" appears, and Uwazi saves nothing.
-
In the confirmation box, type your current password and select Accept.
-
Wait for the "Account updated" message. Your new email works right away.
If another account already uses that address, Uwazi shows an error. Pick a different address.
Change your password
-
Go to Settings in the sidebar, then select Account.
-
Find the Change Password card.
-
Type a new password in New password.
-
Type the same password again in Confirm new password.
If the two don't match, the message "Passwords do not match" appears. Uwazi saves nothing.
-
Select Update.
-
In the confirmation box, type your current password and select Accept.
Uwazi doesn't set a minimum length, so choose a strong password yourself. If you leave both fields empty, your password stays the same.
Turn on two-factor authentication
Two-factor authentication asks for a one-time code each time you sign in. An authenticator app generates this code on your phone or computer.
You can't turn off two-factor authentication yourself, and there are no backup codes. If you lose access to your authenticator app, an administrator must reset it for you.
-
Go to Settings in the sidebar, then select Account.
-
Find the Two-Factor Authentication card and select Enable.
A side panel opens.
-
Open your authenticator app, such as Google Authenticator, Microsoft Authenticator, or Authy. Some password managers generate these codes too.
-
In the app, scan the QR Code shown in the panel.
If you can't scan, copy the secret key from the panel and type it into the app instead.
-
Type the 6-digit code from your app into the verification field.
-
Select Enable.
-
Wait for the "2FA Enabled" message. The card now shows Activated.
From now on, the login screen asks for your username, password, and a 6-digit code. Open your authenticator app to read the current code.
Reset a forgotten password
-
On the login screen, select Forgot Password or Username?.
-
Type your email address in the field.
-
Select Send recovery email.
Uwazi shows the same message whether or not the address matches an account. This protects your privacy.
-
Open the email titled "Password recovery" in your inbox.
The email also reminds you of your username.
-
Select the reset link in the email. It works once and expires after 24 hours.
-
On the set-password page, type a new password in both Password and Repeat Password.
-
Select Save password, then sign in with your new password.
If the link expired or you already used it, the page shows an error. Start again from step 1 to get a fresh link.
Result
You've updated the account detail you needed, whether that's your email, password, or two-factor security.
After six failed sign-in attempts, Uwazi locks your account and emails you an unlock link. Resetting your password also unlocks it.
See also
- How to manage users and groups — the admin side: create accounts, assign roles, and manage groups
- Permissions by role — what your role lets you do across the instance