Log in to the admin panel
The admin panel lives in the /admin/ folder of your website. Here is how to sign in and what to do first.
Open the login page
Go to https://yourdomain.com/admin/. If you are not signed in you are sent to the login page. Enter your username and password and click Sign in.
Your first five steps
- Change the default password in Settings › Administrator account.
- Enter your contact email in Settings so the contact form can reach you.
- Add your logo and contact details on the Branding & SEO page.
- Pick a template and accent colour on the Appearance page.
- Replace the sample sections with your own on the Sections page.
Sessions and logging out
- You stay signed in while you work. After 2 hours without activity you are signed out automatically.
- Use Log out at the bottom of the left menu when you finish, especially on shared computers.
- The session cookie is protected: it is sent only to your website, is hidden from scripts and is marked secure when your site uses HTTPS.
Too many failed attempts
After 5 wrong password attempts from the same IP address the login is blocked for 15 minutes. This protects your website from automated guessing. Wait 15 minutes, or ask your host to delete the file data/login_attempts.json if you need access immediately.
If you forgot your password
There is no email reset, because the script has no database or mail dependency. Reset the password manually:
- Open
config.phpin a text editor. - In the
[login]section replace the value ofadmin_passwordwith a new bcrypt hash. You can create one with the PHP commandphp -r "echo password_hash('NewPassword123', PASSWORD_DEFAULT);". - Upload the file and log in with the new password.
Prefer HTTPS. Most hosts offer a free certificate. Passwords are then encrypted while travelling to your server.
Last updated