Your Account

Your Catalyst account is the login you use across the panel. Everything on this page lives under Profile, the user card at the bottom of the sidebar.

Prerequisites

• A panel account, provided by your host or administrator.
• Access to the email address on the account, for password resets and email verification.

Sign in

1. Open the panel URL, enter your Email and Password, and select Sign in. Tick Remember me to stay signed in on this browser.
2. If the panel offers it, use Sign in with passkey, or Continue with WHMCS / Continue with Paymenter when your administrator enabled them.
3. If the account uses two-factor authentication, enter the code from your authenticator app (or a backup code) and select Verify. Tick Trust this device for 30 days to skip the code on this browser.
4. If your administrator requires email verification, sign-in is blocked until you confirm your address — the panel tells you to check your inbox for the verification link.

Change or reset your password

Change it while signed in:

1. Open Profile and find the Password card.
2. Enter your Current password and a New password, and tick Sign out all other devices if other sessions should be revoked.
3. Select Update Password.

An account created through external sign-in has no password yet; the card offers Set Password instead.

Reset it when you cannot sign in:

1. On the sign-in page, select Forgot password?.
2. Enter your Email address and select Send reset link. For security the panel shows the same confirmation whether or not the address exists — check your inbox and spam folder.
3. Open the link, enter a New password and Confirm new password, then select Reset password. Passwords must be at least 8 characters.
4. If the link has expired, the page says so — select Request new reset link to start again.

Verify your email

The email line on Profile shows a Verified badge once confirmed. Otherwise select Verify email to resend the verification message.

Two-factor authentication

1. Open Profile and find the Two-Factor Authentication card.
2. Enter your password and select Enable 2FA.
3. Scan the QR code with your authenticator app, or copy the Manual Key.
4. Save the Backup Codes shown in the dialog — they are displayed once and are the way back in if you lose the authenticator.
5. With 2FA on, the card offers New Codes (regenerate backup codes) and Disable (turn 2FA off, with your password).

Passkeys

1. Open Profile and find the Passkeys card.
2. Type a name (optional) and select Add. Your browser or device prompts for the passkey.
3. Select Rename to change the label, or the delete button to remove one.

Active sessions

The Active Sessions card lists every device signed into your account, with the browser, operating system, IP address, and when it was last active.

• The revoke button on a row signs that device out.
• With more than one session, Sign Out All Other Devices revokes the rest.

Personal API keys

The API Keys card lists the keys you created; Manage API Keys opens the API Keys page. Viewing that page needs apikey.read (or an admin grant); creating a key needs apikey.write (or admin.write).

1. Select Create API Key.
2. Give the key a Name and choose an Expiration — 7, 30, 90 (the default), 180 days, 1 year, or Never expires.
3. Choose the key’s Permissions, or leave All my permissions selected to inherit everything you hold. A key can never exceed your own permissions.
4. Set the Rate Limit if the default of 100 requests per minute is wrong.
5. Select Create API key and copy the value immediately — it is shown once and cannot be retrieved later.
6. Revoke key from the list when it is no longer needed; anything using it loses access at once.

For what a key can call, see the API overview.

Profile and preferences

• Avatar: click the avatar and choose an image (JPEG, PNG, GIF, or WebP), or select Remove avatar.
• Name: select the pencil to edit your Username, First name and Last name.
• Appearance: sets your theme mode and accent colors for this browser only. The Language selector in the same card changes the panel interface language and is saved to your account, so it follows you to another browser.
• Linked accounts: link or unlink WHMCS / Paymenter when your administrator has enabled them.
• Recent Activity: your recent account actions.
• Danger Zone: Export My Data downloads catalyst-account-export.json; Delete Account removes the account after you type DELETE to confirm.

Related

• Users & Subusers — giving other people access to your server
• SFTP — the SFTP password is a separate token, not your panel password