User management and profiles

FastStaq gives users a full account experience and gives admins the tools to manage them, with privacy and compliance built in.

What users can do

• Edit their profile: name, details, and avatar (uploaded to your S3/R2 bucket).
• Change their password with current-password confirmation.
• Change their email through a verified, PIN-protected flow so accounts cannot be hijacked.
• Enable 2FA. See Managing your account and 2FA.
• Export their data and delete their account under the GDPR tooling.

What admins can do

From the admin panel you can:

• Browse and search users.
• View a user's details, roles, and activity.
• Promote or change roles (see Roles and permissions (RBAC)).
• Suspend an account, which revokes its active sessions immediately.

Account deletion (two-phase)

Deletion is a two-phase, right-to-erasure flow rather than an instant hard delete, so accidental deletions can be handled and audit obligations are met. See GDPR and data retention for the full lifecycle.

Avatars and uploads

Avatar images go through the same validated upload pipeline as all attachments (MIME/extension allowlist, size limits, magic-byte sniffing). Configure storage first: see Configure file storage (R2/S3).

Related articles

• Authentication module
• GDPR and data retention
• Admin panel and settings

Still need help?

Open a support ticket for account or profile issues.