Profile
View your CrossWatch activity and manage your account, security, and preferences.
The Profile page is your personal CrossWatch home and account-management area. Open it from the profile icon at the end of the navigation, or visit /profile.
It is available to administrators and managed users. The page combines:
A personal activity overview
Account and security controls
Personal preferences, where available
Profile page and User Profile
Changing the Profile page never changes a User Profile assignment or Access Mode.
Profile page
Personal overview, identity, security, and preferences
User Profile
Delegated provider instances, Sync Pairs, Watchers, and Webhooks
Access Mode
Read Only or Full Access within the delegated scope
For managed users, the assigned User Profile determines the data shown. The Profile page does not expose another user's delegated resources.
Administrators use their normal CrossWatch scope. They are not assigned to a managed User Profile.
Overview
The Overview tab provides a personal summary of CrossWatch activity. Available sections can include:
Now Playing, Last Watched, and Continue Watching
Recent Watchlist and Recent Activity
Quick Stats and connected services
The header can show the profile picture, display name, username, account type, member date, and activity information.
Security
The Security tab is available to administrators and managed users. It controls only the signed-in account.
Read Only limits normal CrossWatch resource changes. It does not limit personal account security.
Display name and profile picture
Your display name appears on the Profile page and in navigation. It can contain up to 64 characters. Changing it does not affect your username, User Profile, Access Mode, or delegated resources.
You can upload a PNG, JPG, JPEG, or WebP profile picture up to 5 MB. Select Replace picture to upload an image, or Remove picture to remove it.
CrossWatch selects the displayed avatar in this order:
Removing an uploaded picture can reveal a linked-account image.
Password
Select Change password and enter your current password and a new password. New passwords require at least eight characters.
CrossWatch keeps the current browser session. It clears all other sessions.
Two-factor authentication
CrossWatch uses six-digit TOTP codes. Select Set up 2FA, scan the QR code or enter the setup key, then verify a current code.
Enabling 2FA does not change the User Profile or Access Mode.
Recovery codes
CrossWatch generates recovery codes when you enable 2FA. Store them safely. Each code has one use.
Select Recovery codes to generate a replacement set. This requires your current password and invalidates the previous codes. Recovery codes are available only while 2FA remains enabled.
Disable 2FA
Disabling 2FA requires your current password. CrossWatch removes the TOTP requirement and recovery codes, then clears other sessions. The current session remains active.
Linked sign-in accounts
You can link or unlink your own Plex and OIDC identities.
Select Link Plex account to complete Plex authorization. The linked identity becomes an additional sign-in method.
Select Link OIDC account when an administrator has configured OIDC. The linked identity becomes an additional sign-in method.
Linking either account does not replace your username and password. It does not change the User Profile or Access Mode.
Managed users cannot configure global OIDC settings, including the issuer URL, client ID, client secret, or scopes.
Active sessions
The session list shows the current session, other active sessions, client information, IP address, and session age.
Revoke individual sessions or select Revoke other sessions. You cannot revoke the current session here. Select Logout to end it.
Preferences
The Preferences tab is available to administrators and Full Access managed users. It is hidden for Read Only managed users.
Current settings include:
Playing card — shows or hides the floating now-playing card.
Quick add — shows or hides the shortcut for manual watched-item logging.
These preferences belong to your User Account. They do not change synchronization settings or your User Profile.
Managed user access
All managed users receive the personal Profile page.
Read Only
Read Only managed users can view their delegated overview and manage their own display name, picture, password, 2FA, recovery codes, linked accounts, and sessions.
They cannot change normal delegated CrossWatch resources. The Preferences tab is unavailable.
Full Access
Full Access managed users receive the same Profile page and security controls. They can also use supported writable CrossWatch features within their assigned User Profile.
Full Access does not grant administrator access.
What you cannot change here
The Profile page does not let managed users change:
Their assigned User Profile or Access Mode
Provider instance, Sync Pair, Watcher, or Webhook assignments
Other users, global OIDC configuration, or global CrossWatch settings
Administrators manage user assignments and Access Modes through Managed users.
Last updated
Was this helpful?