Signing in directly to app.blackbox.md

The panel's sign-in page (app.blackbox.md/login) lets you enter the app.blackbox.md panel without going through blackbox.md: with your username and password, or with Google or GitLab. You land here when you type the address in your browser, after your session expires, or when “Deschide panoul” (Open the panel) on blackbox.md cannot sign you in automatically.

Available to: the blackbox.md account holder who has opened the panel from blackbox.md at least once.

The blackbox.md website is available in Romanian and Russian; this article quotes the Romanian labels with their English meaning.

Tip The recommended way is still “Deschide panoul” on blackbox.md (“Contul meu” (My account) → “Profil” (Profile), the “Serviciile tale” (Your services) card) or “Panou de administrare” (Admin panel) in the account menu. It does not ask for a username and password, and it also works for accounts created with Google or GitLab. Details: Opening the app.blackbox.md panel from your account.

What you see on the page

The form has the heading “BlackBox”, the subtitle “Server Panel” and, in the top right corner, the language buttons “EN”, “RO” and “RU”. The page opens in English unless another language has already been chosen in this browser (for example, during an earlier entry from blackbox.md). If it is in another language, click “EN”: the language changes immediately and the browser remembers it.

What to enter

Your panel account is created automatically the first time you open the panel from blackbox.md, and its password is a copy of your blackbox.md password. This means:

• direct sign-in does not work until you open the panel from blackbox.md for the first time; for that first entry, your email address must be verified (see Verifying your email address);
• accounts created only with Google or GitLab have no panel password: use the “Google” or “GitLab” buttons on this page, or “Deschide panoul” (Open the panel);
• after you change your password on blackbox.md, the new password works in the panel only after the next time you open the panel from blackbox.md.

How to sign in with your username and password

1. Open https://app.blackbox.md/login.
2. If the page is in another language, click “EN”.
3. In “Username”, enter your account's email address in lowercase letters.
4. In “Password”, enter your blackbox.md account password.
5. Click “Sign in”. The button shows “Signing in…”.
6. If you have turned on 2FA in the panel, the “Two-Factor Authentication” step appears (see below). Otherwise, the panel opens.

After you sign in, you always land on the “Overview” page, even if you started from a link to another page. The servers you ordered on blackbox.md are in the left menu, under “My Servers”. If “Overview” shows “No servers found.” and “Contact an administrator to get access.”, this is normal: see The “Overview” page.

Your session lasts 8 hours from sign-in. After that, the next page you open takes you back to the sign-in form. To sign out earlier, open the user menu (top right) → “Logout”. Logging out of the panel does not sign you out of blackbox.md.

How to sign in with Google or GitLab

Above the form, under “Sign in with”, are the “GitLab” and “Google” buttons. They work only if:

• your panel account already exists, which means you have opened the panel from blackbox.md at least once;
• your Google or GitLab account has the same email address as your blackbox.md account, confirmed with the provider.

1. Click “Google” or “GitLab”.
2. Sign in with the provider using the account that has the same email address, and allow access.
3. The panel opens “Overview”. If you have turned on 2FA, the “Two-Factor Authentication” step appears first.

The panel's buttons do not create a new account. If the panel cannot find an account with the email address it received from the provider, it shows “We couldn't finish signing you in. Please try again.” To return to the form from this error page, use the “Back to login” link.

The “Two-Factor Authentication” step

It appears only if you have turned on 2FA in the panel (see Two-factor authentication (2FA) in the panel).

1. The page shows the message “Enter the 6-digit code from your authenticator app.”
2. Enter the code from the app in the “Authenticator Code” field.
3. Click “Verify”.

If your phone is not at hand, click “Use recovery code instead”, enter one of your 8-character codes in the “Recovery Code” field and click “Verify”. Each recovery code works only once.

You must complete this step within 5 minutes, with no more than 5 attempts. The error messages are: “Invalid 2FA code” or “Invalid code. Please try again.” (wrong or already used code), “Too many 2FA attempts” (you have used all 5 attempts), “No 2FA session pending” (the 5 minutes have passed). In the last two cases, click “Back” and sign in again.

With direct sign-in, the code is requested every time. The “Remember this device for 30 days” option appears only when you enter from blackbox.md with “Deschide panoul” (Open the panel).

This step also has the “Lost 2FA device?” link. It applies only to 2FA in the panel. If you have neither your phone nor your recovery codes, read Lost your 2FA device or write to support@blackbox.md.

Temporary lockout after too many attempts

The panel accepts no more than 5 sign-in attempts in 5 minutes for the same username, and 20 attempts in 5 minutes from the same IP address. Above the limit, the page shows the same message, “Invalid username or password.”, even if the password is correct.

Warning Every attempt you make during the lockout extends it. Wait 5 minutes without any attempt, or enter from blackbox.md with “Deschide panoul” (Open the panel), which this lockout does not affect.

Error messages

The “Forgot password?” link

The link under the “Sign in” button applies only to the password of your panel account, not to your blackbox.md password. Any password set only in the panel is replaced with your blackbox.md password the next time you open the panel from blackbox.md. If you forgot your password, read Forgot your account password.

Frequently asked questions

I enter the correct email address and password, but I see “Invalid username or password.” Why? Check that your email address is typed in lowercase letters and that you have opened the panel from blackbox.md at least once. If you have made 5 attempts in the last 5 minutes, sign-in is temporarily blocked: wait 5 minutes without any attempt, or use “Deschide panoul” (Open the panel).

I changed my password in the panel, on the “Settings” page. Which password is valid? The password set in the panel stays valid only until the next time you open the panel from blackbox.md, when it is replaced with your blackbox.md password. Change your password on blackbox.md; details in Panel settings: profile, password, and sessions.

My account was created with Google and has no password. Can I sign in directly? Yes, with the “Google” button on the panel's sign-in page, if you have already opened the panel from blackbox.md once. You cannot sign in with a username and password.

I clicked “Deschide panoul” on blackbox.md and this page opened. Why? Automatic sign-in failed, for example because your account's email address is not verified. Verify your address, then click “Deschide panoul” again. Other causes: I can't sign in to my account or the panel.