Account settings
Nội dung này hiện chưa có sẵn bằng ngôn ngữ của bạn.
Settings (/settings) is where you manage your account: your display name and
time zone, the language the panel speaks, your login email(s), the Google/GitHub
logins linked to you, and every device that’s currently signed in. It’s personal —
nothing here changes a server or affects other members. Available on all plans.
Most fields save automatically — there’s no Save button. Change a value and a small “Changes save automatically” line confirms it landed.
What else you can do
Section titled “What else you can do”The page is a stack of cards under the Your account heading:
- Profile — set your Display name, Time zone and Language (English or Tiếng Việt; switching flips the whole UI instantly). Click your avatar to shuffle to a new generated avatar — there’s no image upload.
- Connected accounts — link or unlink Google and GitHub as one-click logins. A provider only shows Connect if it’s enabled on this server; otherwise it reads “Not enabled on this server.”
- Email — see your Primary email, Change it (see below), and add backup emails you can also sign in with. Any verified backup can be promoted with Make primary.
- Sign-in & security — Two-factor authentication and Active sessions: every signed-in device with its browser, OS, IP and age. Revoke one, or Sign out everywhere else to keep the current device and drop the rest.
- Image optimization — your account-wide default for how image uploads are processed across all your sites (each site can override it in its editor).
- Email notifications — pick which alerts (backup failed, SSL expiring, server offline, weekly summary) reach your inbox.
Below the cards, Looking for something else? shortcuts jump to the surfaces that used to live here — Team, Billing, Alert channels and the Developer/API area. Owners also get a Danger zone to close the account.
Change your email, step by step
Section titled “Change your email, step by step”Email change is the highest-risk action in a passwordless account, so it’s deliberately a two-inbox handshake:
- In the Email card, click Change next to your primary address.
- Enter the new address and click Send confirmation.
- Open the new inbox and click the confirmation link — that swaps your primary email. A pending change banner shows in the meantime; you can Cancel change from the app before it’s confirmed.
- A separate “was this you?” link is mailed to your old inbox. Clicking it reverts the change and signs out every session — the safety net if someone else started the swap.
Adding a backup email instead sends a 6-digit code to your current primary inbox (proving it’s really you), which you enter to verify.
How it works
Section titled “How it works”Everything on this page is control-plane state, driven by the /v1/account API — there’s
no agent or VPS involved:
| Card | Endpoint | Stored in |
|---|---|---|
| Profile | PATCH /v1/account | users (name, timezone, locale, avatarSeed) |
| Image optimization | PATCH /v1/account (prefs) | users.prefs JSON |
| Connected accounts | GET/DELETE /v1/account/identities | user_identities |
| Email — change | POST /v1/account/email/change + emailed confirm/cancel links | email_change_requests |
| Email — backups | POST /v1/account/emails/add · /confirm · DELETE /emails/:id | user_emails |
| Sessions | GET /v1/account/sessions · POST .../revoke · .../revoke-others | sessions |
| Close account | DELETE /v1/orgs/:id (owner only, name-confirm) | deletes the org (cascade) + revokes sessions |
Profile edits and image-optimization changes auto-save on blur/change. Sessions are
listed by an opaque sha256 handle — the raw session token is never sent to the browser.
The confirm/cancel email links revoke sessions on use, so a leaked session can’t survive
an email change.
Gotchas & troubleshooting
Section titled “Gotchas & troubleshooting”- 2FA is a preview. The Two-factor authentication enable wizard (QR code, 6-digit verify, recovery codes) is UI-only right now — nothing is stored server-side and it does not add a step to your login yet. Treat it as a mockup until the backend ships.
- Email notifications toggles don’t persist. The four notification checkboxes are a local preview — they reset on reload and aren’t yet wired to a backend. For alerts that really fire (Slack / Telegram / webhook / email routing), use Alert channels via the Configure… link.
- Server-side image optimization is “Soon.” Under Image optimization, the “Also optimize on the server” section is flagged Soon — the in-browser (client-side) optimization above it is live; the on-box re-encode is not yet active.
- No workspace rename here. MZPanel is a personal account (one auto-created workspace, no switcher), so there’s no organization-rename or transfer-ownership control on this page. To hand off an account, change its email; to delegate, invite an Admin on Team.
- Close account is owner-only and permanent. It deletes the workspace and signs you out everywhere; a returning login creates a fresh account. Your VPSes are untouched — the agent keeps running until you uninstall it. You must type the exact account name to arm the button.
- A provider won’t connect? If Google or GitHub shows “Not enabled on this server,” that login isn’t configured on this MZPanel instance — it’s not an error on your side.
Related
Section titled “Related”- Dashboard tour — how the account, fleet and server areas fit together.
- Team & roles — invite members and set per-role access.
- Notifications & alert channels — Slack, Telegram, webhook and email routing.
- Billing & plans — your subscription and plan limits.