Panel settings: profile, password, and sessions
The “Settings” page in app.blackbox.md: your account details in the panel, the panel password, and signing out on all devices.
On this page
The “Settings” page (app.blackbox.md/settings, sidebar → “Account” section → “Settings”) shows your account details in the app.blackbox.md panel and lets you change the panel password and end all open sessions in the panel. The text under the title reads “Account profile, password, and session controls”. On a phone, open the sidebar with the menu button in the top-left corner.
Available to: any customer signed in to the app.blackbox.md panel.
The blackbox.md website is available in Romanian and Russian; this article quotes the Romanian labels with their English meaning.
What's on the page
| Block | What you see | What you can do |
|---|---|---|
| “Profile” | “Username” (the email address of your blackbox.md account, in lowercase), “Role” (“Client”), “Two-factor authentication” (“Enabled” or “Disabled”) | View only |
| “Security” | The text “Manage two-factor authentication, recovery codes, and authenticator enrollment.” | The “Go to Security & 2FA” button opens the “Security” page |
| “Change Password” | Three password fields | Change the panel password (not recommended; see below) |
| “Sessions” | The “Sign Out Everywhere” button | End all your sessions in the panel |
The “Profile” details cannot be edited in the panel. You change your name and phone number on blackbox.md: My profile: name, phone number and email. To turn on 2FA, click “Go to Security & 2FA” and follow the guide Two-factor authentication (2FA) in the panel.
Changing the panel password
Important The panel password is a copy of your blackbox.md password. The next time you enter the panel from blackbox.md with “Deschide panoul” (Open the panel), the password you changed here is replaced again with your blackbox.md password. Change your password on blackbox.md: Changing your account password.
If you still want to change the password in the panel:
- In the “Change Password” block, fill in “Current password”. Usually, this is the password you had on blackbox.md the last time you entered the panel from blackbox.md.
- Fill in “New password” and “Confirm new password”. The rule is shown under the fields: “At least 12 characters, including 3 of: uppercase, lowercase, digit, special character.”
- Click “Change Password” (while it is processing, the button shows “Changing…”).
- The message “Password changed. Redirecting to login…” appears. All your panel sessions end, including the current one, and you are taken to the panel sign-in page.
If you signed up with Google or GitLab and have no password on blackbox.md, you don't know the panel password, so this form is of no use to you. Enter the panel with “Deschide panoul” on blackbox.md.
| Message | What it means | What to do |
|---|---|---|
| “Passwords do not match.” (under the confirmation field; the button becomes inactive) | The confirmation differs from the new password | Type the confirmation again |
| “Fill in all three fields.” | A field is empty | Fill in all the fields |
| “Invalid current password” | The current password is wrong | Enter your blackbox.md password (see step 1) |
| “Password must be at least 12 characters” | The new password is shorter than 12 characters | Choose a longer password |
| “Password must include at least 3 of: uppercase, lowercase, digit, special character” | The new password uses too few types of characters | Add uppercase letters, digits, or special characters |
| “Too many attempts. Try again later.” | More than 5 attempts in 15 minutes | Wait 15 minutes |
| “Failed to change password.” | Another error | Try again; if it keeps happening, contact us |
Messages sent by the server always appear in English, whatever the panel language.
Signing out on all devices
- In the “Sessions” block, click “Sign Out Everywhere”.
- Your browser asks you to confirm: “Sign out of every session for this account, including this one? You will need to sign in again.” Confirm in the browser window.
- The button shows “Signing out…”, and then you are taken to the panel sign-in page.
- Sign in again with “Deschide panoul” (Open the panel) on blackbox.md: Opening the app.blackbox.md panel from your account.
What happens:
- All panel sessions end, on all devices and in all browsers, including the current one. On other devices, panel pages stop loading, and after a reload the sign-in page appears.
- Devices remembered for 2FA (“Remember this device for 30 days”) are forgotten: the code is asked for again at the next sign-in.
If “Failed to sign out of other sessions.” appears, try again; if the error keeps happening, contact us.
Warning “Sign Out Everywhere” does not sign you out of blackbox.md and does not revoke API tokens. To end all your blackbox.md sessions and all your API tokens at once, change your password on blackbox.md. To revoke a single token, go to “Contul meu” (My account) → “Token-uri API” (API tokens): API tokens: creating, copying and revoking.
Session length and “Logout”
- A panel session lasts 8 hours from sign-in. Each “Deschide panoul” (Open the panel) on blackbox.md starts a new 8-hour session. After the session expires, panel pages stop loading; reload the page and you will reach the sign-in page.
- The user menu (your initials in the top-right corner) → “Logout” ends only the current panel session, in this browser. You stay signed in on blackbox.md; sign out there separately: Signing in to blackbox.md and signing out.
What each action ends:
| Action | Current panel session | Other panel sessions | Remembered devices (2FA) | blackbox.md sessions | API tokens |
|---|---|---|---|---|---|
| “Logout” (user menu) | Yes | No | No | No | No |
| “Sign Out Everywhere” | Yes | Yes | Yes | No | No |
| “Change Password” in the panel | Yes | Yes | Yes | No | No |
| Changing the password on blackbox.md | No | No | No | Yes, all | Yes, those created before |
When to use “Sign Out Everywhere”
| Situation | What to do |
|---|---|
| You lost your laptop or phone, or you suspect someone has learned your password | From a safe device, follow the steps below, in this order |
| You worked on a shared computer and stayed signed in | Click “Sign Out Everywhere” from your own device; if you also stayed signed in on blackbox.md, change your password there too |
| You checked “Remember this device for 30 days” on someone else's computer | Click “Sign Out Everywhere”: the 2FA code will be asked for again |
Steps after a suspected compromise
- On blackbox.md, change your password (Changing your account password). All blackbox.md sessions end, and API tokens created before the change stop working.
- Sign in to blackbox.md with the new password and click “Deschide panoul” (Open the panel). At this sign-in, the panel password becomes the new password; until then, the panel still accepts the old password.
- In the panel, open “Settings” → “Sign Out Everywhere” and confirm.
- Sign in again with “Deschide panoul” and turn on 2FA if it is not already on.
- Check your servers and API tokens: Security recommendations for your account. If you notice activity that is not yours, email us at support@blackbox.md.
Frequently asked questions
Why can't I sign in to the panel directly with the password I changed in “Settings”? The last time you entered the panel from blackbox.md, the panel password was replaced with your blackbox.md password. On the panel sign-in page, use your blackbox.md password, or enter with “Deschide panoul” (Open the panel).
Why can't I find “Settings” in the menu with my initials? The user menu contains only “Security & 2FA” and “Logout”. “Settings” is in the sidebar, in the “Account” section.
Does “Sign Out Everywhere” affect access to my servers? No. Servers, SSH keys, and root passwords are not affected; only panel sessions end.
Can I change my username? No. The username is the email address of your blackbox.md account, and the email address cannot be changed from your account. If you have questions, contact us.