Documentation Index
Fetch the complete documentation index at: https://docs.xloud.tech/llms.txt
Use this file to discover all available pages before exploring further.
Overview
User Center is the self-service hub for your own Xloud account. From here you can update your profile, change your password, enable or manage two-factor authentication (2FA), and create application credentials for automation. Every page in User Center affects only your account — nothing here changes cloud resources for other users.Prerequisites
- An active Xloud account — sign in to the Xloud Dashboard
- An authenticator app on your phone (for 2FA): Google Authenticator, Microsoft Authenticator, Authy, 1Password, or any standard TOTP app
Video Walkthrough
Open User Center
User Center Overview
The landing page shows everything about your account at a glance.| Section | What’s there |
|---|---|
| Header | Avatar (click to change), display name, email, role tags |
| Stat row | Number of Roles, Domains, and Projects you belong to |
| Account Details | Username, Email, Phone, Real Name, Job Title, Department, User ID, Current Project |
| Roles & Security | My Roles, Domain, Project ID, Account Status |
- Edit Profile → opens Profile Settings
- Security (2FA) → opens the Security page
Edit Profile Settings
The Profile Settings page has two tabs for self-service account edits.Profile Tab
Fill in your personal information — these fields help teammates identify you in multi-user projects.| Field | Notes |
|---|---|
| First Name | Up to 64 characters |
| Last Name | Up to 64 characters |
| Phone | Any standard format, up to 20 characters |
| Job Title | Up to 128 characters |
| Department | Up to 128 characters |
Security Tab
The Security tab contains three cards: Two-Factor Authentication, Change Password, and Sign-in activity.Two-Factor Authentication card
Shows your current 2FA status — Enabled or Not Enabled. Click Setup Two-Factor Authentication (when not enabled) or Manage 2FA Settings (when enabled) to jump to the dedicated Security page covered below.Change Password card
Enter the new password
Fill in New Password (minimum 8 characters) and Confirm New Password. The
two values must match.
Sign-in activity card
Lists your current session and up to 10 recent active sessions on your account. Each entry shows:| Column | What it shows |
|---|---|
| IP address | Where the session signed in from (a green This session tag marks the current one) |
| User agent | Browser / OS string (trimmed to the first 80 characters) |
| Signed in | Relative time since sign-in |
| Expires | When the session will expire |
Two-Factor Authentication (2FA)
Two-Factor Authentication adds a second verification step to every sign-in — a rotating 6-digit code from your authenticator app, on top of your password. It is the single biggest thing you can do to protect your account from stolen-password attacks.Xloud supports any standard TOTP (Time-based One-Time Password) authenticator app:
Google Authenticator, Microsoft Authenticator, Authy, 1Password, Aegis, and others.
Check 2FA Status
Open User Center → Security (2FA). The page shows one of two states:| State | Meaning |
|---|---|
| Not enabled (blue Info alert) | Your account is password-only. Click Enable 2FA to set it up. |
| Enabled (green Success alert) | 2FA is active. The alert shows when it was enabled, when it was last used, and how many unused recovery codes you have left. |
Enable 2FA
Click Enable 2FA
On the Security page, click the blue Enable 2FA button. The Dashboard
navigates to a dedicated enrollment page.
Install an authenticator app
Install an authenticator app on your phone — Google Authenticator, Microsoft
Authenticator, Authy, 1Password, or Aegis all work.
Scan the QR code
The page shows a QR code and a Manual key below it. Open the authenticator
app, tap Add or +, and either scan the QR or paste the manual key.The app starts generating fresh 6-digit codes every 30 seconds.
Verify the code
Type the current 6-digit code from the app into the 6-digit code field on the
Dashboard, then click Verify & Enable.
Save your recovery codes
The Dashboard shows 10 one-time recovery codes. You will not see these codes
again. Click Download as .txt or Copy to clipboard and store them somewhere
safe (password manager, printed copy, encrypted note). Each code can be used once
to sign in if you lose access to your authenticator.Click I’ve saved them to close the dialog.
The Security page now shows a green “Enabled” alert with the enrollment timestamp.
Sign In with 2FA
After enabling 2FA, every sign-in asks for a 6-digit code in addition to your password. Open your authenticator app, read the current code, and type it in. Codes rotate every 30 seconds — if the current code expires, just wait for the next one.Regenerate Recovery Codes
If you have used some recovery codes or suspect they have been exposed, you can mint a fresh set of 10.Disable 2FA
Confirm with a code
Enter a current 6-digit code from your authenticator, or click Use a
recovery code instead and enter one of your saved recovery codes.
Application Credentials
Application credentials are long-lived API tokens for scripts and automation. They can optionally be scoped to a subset of roles and have an expiry date. Open User Center → Application Credentials to create, view, and revoke your credentials.Application Credentials Guide
Full walkthrough on creating, using, and revoking application credentials
Common Tasks
Set a profile picture
Set a profile picture
Open User Center, click your avatar in the header, pick an image, and save. The
avatar updates across the Dashboard without a sign-out.
Change your password
Change your password
User Center → Edit Profile → Security tab → Change Password card. Enter your
current password, then the new one twice, and click Change Password.
Turn on 2FA for your account
Turn on 2FA for your account
User Center → Security (2FA) → Enable 2FA → scan the QR in your authenticator
→ verify the 6-digit code → download the 10 recovery codes and store them safely.
Check where you are signed in from
Check where you are signed in from
User Center → Edit Profile → Security tab → Sign-in activity card. Review the
list of active sessions, their source IP addresses, and last sign-in time. If you
see a session you do not recognize, change your password immediately.
Recover access if you lost your phone
Recover access if you lost your phone
At the sign-in prompt, click Use a recovery code and enter one of the 10 codes
you saved during enrollment. This signs you in AND disables 2FA — re-enroll on your
new phone as soon as possible.If you also lost your recovery codes, contact your administrator — only an
administrator can reset 2FA on your behalf.
Related Topics
Multi-Factor Authentication
Technical reference for TOTP MFA — includes CLI-based enrollment
Application Credentials
Long-lived API tokens for scripts and CI pipelines
Access & Security
RBAC, keypairs, and other access controls on the Dashboard