{% include 'public/partials/header.html' %}<main class="wrap page-shell usercp-shell">{% include 'usercp/partials/banner.html' %}<div class="ucp-grid">{% include 'usercp/partials/sidebar.html' %}<div class="ucp-main"><section class="ucp-page-heading"><div><span class="eyebrow">Security</span><h2>Password, MFA & sessions</h2><p>Protect your account and review where it is signed in.</p></div></section><form method="post" action="{{ $baseUrl }}/usercp/password" class="panel ucp-card security-form"><input type="hidden" name="_token" value="{{ $csrfToken }}"><header class="ucp-card-head"><div class="ucp-card-icon danger">◇</div><div><h3>Change password</h3><p>Use a unique passphrase. Changing it revokes remembered logins.</p></div></header><div class="ucp-card-body form-grid"><label><span>Current password</span><input class="input" type="password" name="current_password" required></label><label><span>New password</span><input class="input" type="password" name="new_password" minlength="12" required></label><label><span>Confirm</span><input class="input" type="password" name="confirm_password" minlength="12" required></label></div><footer class="ucp-card-footer"><button class="btn primary">Update password</button></footer></form><section class="panel ucp-card"><header class="ucp-card-head"><div class="ucp-card-icon">◎</div><div><h3>Authenticator MFA</h3><p>Require a time-based code after your password.</p></div></header><div class="ucp-card-body">{% if $currentUser['mfa_enabled'] %}<div class="notice success">Two-factor authentication is enabled.</div><form method="post" action="{{ $baseUrl }}/usercp/security/mfa/disable" class="form-grid"><input type="hidden" name="_token" value="{{ $csrfToken }}"><label><span>Password to disable</span><input class="input" type="password" name="password" required></label><div><button class="btn danger">Disable MFA</button></div></form>{% else %}{% if $mfaSetupSecret %}<div class="mfa-secret"><b>Authenticator secret</b><code>{{ $mfaSetupSecret }}</code><p>Add this secret to any TOTP authenticator, then verify the current code.</p></div><form method="post" action="{{ $baseUrl }}/usercp/security/mfa/enable"><input type="hidden" name="_token" value="{{ $csrfToken }}"><input class="input" name="code" inputmode="numeric" placeholder="123456" required><button class="btn primary">Enable MFA</button></form>{% else %}<form method="post" action="{{ $baseUrl }}/usercp/security/mfa/setup"><input type="hidden" name="_token" value="{{ $csrfToken }}"><button class="btn primary">Set up authenticator</button></form>{% endif %}{% endif %}{% if $recoveryCodes %}<div class="recovery-codes"><h4>Save these recovery codes now</h4>{% foreach $recoveryCodes as $code %}<code>{{ $code }}</code>{% endforeach %}</div>{% endif %}</div></section><section class="panel ucp-card"><header class="ucp-card-head"><div class="ucp-card-icon">◫</div><div><h3>Active sessions</h3><p>Revoke sessions you no longer recognize.</p></div></header><div class="ucp-card-body session-list">{% foreach $sessions as $session %}<div class="session-row"><div><b>{{ $session['ip_address'] }}</b><span>{{ $session['user_agent'] }}</span><small>Last active {{ $session['last_seen_at'] }}</small></div><form method="post" action="{{ $baseUrl }}/usercp/security/sessions/revoke"><input type="hidden" name="_token" value="{{ $csrfToken }}"><input type="hidden" name="session_id" value="{{ $session['id'] }}"><button class="btn subtle">Revoke</button></form></div>{% endforeach %}</div></section></div></div></main>{% include 'public/partials/footer.html' %}