Members are contacts who have a password. They log in on your published site, and each account belongs to your site only.
Sign-up
Visitors sign up at /members/register with their name, email and a password of at least eight characters, plus optional marketing consent. If a level is marked as the default, it is granted at that moment.
Email verification is required
Signing up doesn’t log anyone in. A confirmation email goes out, and the link in it is valid for 48 hours. Clicking it verifies the address and logs the person in. If someone tries to log in before that, they are asked to confirm their address and offered the option to resend. This is what stops a stranger from taking over an address that is already on your contact list.
Invitations are the second door
When you grant access to an address that doesn’t have an account yet, the invitation email carries a signed link to set a password, valid for seven days. Setting the password creates the login and verifies the address in one step, because clicking a link from the email already proves the person has access to that inbox. See Granting and revoking access.
Password reset
Members use the forgotten password page on your site. The link is single-use and expires after 60 minutes, and a confirmation email goes out once the password is changed. An invited member who never finished setting a password can use the reset as their way in. For privacy, the page responds the same way whether or not the address has an account.
What members change themselves
On their account page they can update their name and phone, upload or remove a photo and change their password. The email address is read-only, with a note saying that changing it means contacting you.
Self-service cancellation is your call
You control this in Sales, under the subscription and cancellation settings, with a switch that lets customers cancel their own subscriptions from their account. When it’s on, a member cancels from their subscriptions page and keeps access until the end of the paid period. When it’s off, they have to write to you. A link to the billing portal, where they update their card, is offered separately.
Related guide: Member area.