During the installation of XOOPS you were asked to input an “Admin name” and “Admin password” Both these strings are case sensitive and should be used to login to your site as “site administrator”. A site administrator has unrestricted access to the site and allows entry to the website administration section, as well as the normal registered user section. Both usernames and passwords may be changed in the administration->edit user section. Make certain your login strings are unique and secure, as they will grant access to any user who inputs them!

Once logged in as administrator a new menu section appears in your home page sidebar with a link to Site administration. This link appears because of your login status as administrator and is the link to the main control center for your site. It is possible to promote any registered user to site administration level, though for security reasons this is usually assigned to select trusted personnel only.

Any visitor may register with your site (if you allow site registration) granting access to restricted content, interactivity and privileges, depending on how your site is configured. They will not have access to the site administrator's link to the admin section, nor will they be able to gain access by inputting the admin URL in the address bar. (Access is combined with a cookie function)

Users can only register using unique usernames and password combinations. As administrator you may also assign certain usernames (in Site admin->user info settings) that you want to prevent new registrants using. Once any combination of username/password strings has been used the system will not allow duplication for security reasons.

Registered users can change their passwords at any time by updating their account information. Once a registered member logs in successfully, they are returned to the site page they were viewing. Other features and menus of the site may now be available to them, depending on how the site is configured.

If for any reason an unrecognised combination of username and password is used during login, the system will return an “Incorrect login” page. A subsequent page displaying the login form quickly follows this. There is also an extra input form for requesting a new password by email should it be lost or become insecure. Users should re-enter their login details and try again, or request a password replacement by email. The login box also displays a Lost Password? link that goes directly to this page.

If a new password is required, fill in your email address in the appropriate form. A registration confirmation email is sent to the address entered if it is recognised in the database. Click on the link in the email to activate another email post containing the new password. Use the new password along with your original username to login on the next visit. You will probably want to change the password back to something more memorable in your account details.

When logged in it is always advisable to end your session by logging out before leaving a site or leaving your computer unattended for periods of time. This is simply good security practice to prevent any unauthorised access.