Changing your account password
How to change your password on blackbox.md and what happens to your sessions, the panel, and your API tokens.
On this page
You change your account password on the “Profilul meu” (My profile) page (blackbox.md/account, “Contul meu” (My account) → “Profil” (Profile)), in the “Securitatea contului” (Account security) card → “Parolă” (Password). The app.blackbox.md panel picks up this password automatically, so this is the only place you need to change it.
Available to: the owner of a blackbox.md account that has a password (an account created with an email address and a password).
The blackbox.md website is available in Romanian and Russian; this article quotes the Romanian labels with their English meaning.
How to change your password
- Sign in to blackbox.md and open “Contul meu” (My account) → “Profil” (Profile).
- In the “Securitatea contului” (Account security) card, under “Parolă” (Password), which reads “Folosește o parolă lungă și unică pentru acest cont.” (Use a long, unique password for this account.), click “Schimbă parola” (Change password).
- In the “Parola curentă” (Current password) field, enter the password you use now.
- In the “Parolă nouă” (New password) field, enter your new password. The hint “Minim 12 caractere, 3 clase de caractere.” (At least 12 characters, 3 character classes.) appears below the field.
- Click “Salvează parola” (Save password). While the request is being processed, the button shows “Se schimbă…” (Changing…).
- The message “Parola a fost schimbată. Vă rugăm autentificați-vă din nou.” (Your password has been changed. Please sign in again.) appears. After about 1.5 seconds you are signed out automatically and taken to the sign-in page.
- Sign in with your new password.
To close the form without making any changes, click “Renunță” (Cancel).
Your new password must be at least 12 characters long and contain at least 3 of these 4 types: uppercase letter (A–Z), lowercase letter (a–z), digit (0–9), special character (for example !, ?, #). Letters with diacritics (ă, ș, ț) and Cyrillic letters count as special characters.
Important Change your password on blackbox.md, not in the panel. The panel's “Settings” page also has a “Change Password” section, but a password changed there is replaced by your blackbox.md password the next time you enter the panel from blackbox.md. Details in Panel settings: profile, password, and sessions.
What changes after you save
| What | Effect | What to do |
|---|---|---|
| Sessions on blackbox.md | All of them end, on every device and browser, including the current one. | Sign in again with your new password. |
| API tokens | All tokens created before the change stop working. | Create new tokens and update them in your AI clients. |
| Password for the app.blackbox.md panel | Updated the next time you open the panel from blackbox.md. Until then, the old password still works when you sign in directly at app.blackbox.md. | Open the panel from blackbox.md as soon as possible. |
| Sessions already open in the panel | Stay active. | If needed, use “Sign Out Everywhere” in the panel. |
API tokens
- Open “Contul meu” (My account) → “Token-uri API” (API tokens). The page is titled “Token-uri de acces (API)” (Access tokens (API)).
- Create a new token with “Creează token” (Create token), with the permissions you need. The steps are in API tokens: creating, copying and revoking.
- Replace the old token in each AI client (Claude, Cursor, VS Code, etc.).
- The old tokens stay in the list without any marker, even though they no longer work. Click “Revocă” (Revoke) next to each one and confirm, so you don't confuse them with the new ones.
The app.blackbox.md panel
- After you sign in with your new password, click “Panou de administrare” (Admin panel) in the account menu or “Deschide panoul” (Open the panel) in the “Serviciile tale” (Your services) card. From this moment on, signing in directly at app.blackbox.md also accepts the new password.
- To end panel sessions that are open on other devices, open “Settings” in the panel (left menu, “Account” section).
- In the “Sessions” section, click “Sign Out Everywhere” and confirm the message “Sign out of every session for this account, including this one? You will need to sign in again.”
- Your current session ends too. Open the panel again from blackbox.md.
Tip Changing your password also works as an emergency switch: all API tokens and all blackbox.md sessions stop at once. If you suspect that a token or your password has reached someone else, change your password, open the panel from blackbox.md (so the old password stops working in the panel too), click “Sign Out Everywhere” in “Settings”, then create new tokens. SSH keys and root passwords on your servers do not change: check them separately. See also Token and AI agent security.
Possible errors
| Message | What it means | What to do |
|---|---|---|
| “Parola curentă este incorectă.” (The current password is incorrect.) | The password in “Parola curentă” (Current password) does not match. | Check your keyboard language and Caps Lock, then try again. If you no longer remember it, see Forgot your account password. |
| “Prea multe încercări. Vă rugăm încercați din nou peste câteva minute.” (Too many attempts. Please try again in a few minutes.) | The limit was exceeded: 5 attempts per hour for one account, 20 per hour from the same IP address. All attempts count, including successful ones. | Wait. The limit frees up gradually, within one hour at most. |
| “Parola trebuie să aibă minimum 12 caractere.” (The password must be at least 12 characters long.) | The new password is too short. | Choose a password of at least 12 characters. |
| “Parola trebuie să includă cel puțin 3 din: literă mare, literă mică, cifră, caracter special.” (The password must include at least 3 of: uppercase letter, lowercase letter, digit, special character.) | The new password has too few character types. | Add the missing types. |
| “Eroare la schimbarea parolei.” (Error changing the password.) | Another problem, for example your session expired or the connection dropped. | Reload the page, sign in again if asked, and try again. If the error keeps coming back, write to us. |
Accounts created with Google or GitLab
If you created your account through Google or GitLab, the account has no password on blackbox.md and the “Parolă” (Password) section does not appear. You cannot add a password from the account page: the security of your sign-in depends on your Google or GitLab account. To disable API tokens, revoke them one by one with “Revocă” (Revoke); to end panel sessions, use “Sign Out Everywhere” in “Settings”. Details in Signing in with Google or GitLab.
Frequently asked questions
Do I get an email after changing my password? No. No email is sent when you change your password; the on-screen message is the confirmation.
Does the root password of my servers change too? No. Your account password has nothing to do with your servers' root passwords and SSH keys. For a server, see Resetting the root password.
My AI client shows a 401 error after the change. Why?
The token was created before the password change and is no longer accepted. The message may contain token not recognised (revoked, expired, or unknown). Create a new token and put it in the client in place of the old one.
I no longer know my current password. How do I change it? The form does not work without your current password. Follow the steps in Forgot your account password.