Website accounts let a site's visitors make an account and log in. The same login is used by the online store (orders, addresses, reorder) and by memberships (members-only pages). Accounts turn on by themselves for a site once its Store or Memberships is on; a site with neither shows no account pages.
What visitors get
- Log in with a password, or with Email me a login link (the link works once, for 15 minutes).
- Create an account: first and last name, email, and an optional password (at least 10 characters; very common passwords are refused). Without a password they log in with emailed links. They tick I agree to the Terms and the Privacy policy; Email me news and offers is off unless they tick it.
- Confirm your email: new accounts confirm their address first (on by default; Settings → Customer accounts can turn it off).
- Forgot password? sends a reset link (1 hour). Choosing a new password logs them out on their other devices.
- My account: Profile and security (name, email, password, the devices they're logged in on, Log out everywhere, Download my data, Delete my account), plus what the site's features add: Orders and Addresses from the store, Membership for members.
The pages (Log in, Create an account, My account …) are made from the site's theme, at /account, /account/login and so on, with the site's own header and footer. They're never indexed by Google.
The Login / Account widget
In the editor, Add → Navigation → Login / Account puts a login button in the header. Logged out it shows an icon, "Log in", or both; logged in it shows the person's initial or first name with a small menu (My account, Orders, Addresses, Membership, Log out). Pick where it goes after logging in: the page they were on, My account, or the home page.
One login per business
An account belongs to the business, so the same email and password work on all of its sites. Each site keeps its own logins (logging in on one site doesn't log you in on another), and an account can't reach the agency dashboard, the editor or the client portal.
Accounts in the business app
Every account is a contact (found by email, or added), with an Account badge, a Website account card and Contacts → Accounts. The timeline shows when the account was made, confirmed and logged in (at most once a day). On the contact: Send login link, Send password reset, Turn off (logs them out everywhere) and Remove account (the contact stays). Automations can start on Account created.
Settings → Customer accounts: which sites use accounts, whether people must confirm their email, and the wording of the account emails (Confirm your email, Login link, Password reset, Set up your account).
Emails
Account emails come from the business's address in its look, never ContentForge or the agency, and they're free (they don't count toward email usage). Login and reset links are never stored where the team can read them.
Privacy
The generated Privacy Policy adds a "When you make an account on this site" paragraph, and the Cookie Policy lists the login cookie (a necessary cookie, so it isn't behind the cookie banner). Device details for security are kept 30 days.