SOQ International Academy

Security Settings

Administrators harden captcha, admin panel URL prefix, watermark, and device-limit options under Settings ? General ? Security. Saving security settings returns to General settings.

security screenshot

Live screenshot from the SOQ beauty demo (aiacademy.aiee.dev).

Surfaces, roles and current terminology

SurfaceCurrent navigation terminologyStatus
Security tabSettings ? General ? SecurityCore
Admin panel URLadmin_panel_url (default example admin)Core
Captcha togglescaptcha_for_admin_login and related switchesCore
Device limit / watermarkDevice limit and watermark fieldsMay show Requires activation
Reset login countssettings/reset-users-login-count actionCore sensitive

Permissions, settings and activation

  • Changing admin_panel_url immediately changes the configured Admin URL — bookmark the new path before saving.
  • Some device-limit or watermark controls may require feature activation; treat Requires activation as blocked until enabled/enabled.
  • Requires General/security settings permission.

Core workflows

Change the Admin URL prefix
  1. Open Settings ? General ? Security.
  2. Set admin_panel_url to the desired path segment (default example admin).
  3. Save, then immediately open the new configured Admin URL and sign in again if prompted.
  4. Update staff bookmarks and reverse-proxy rules.
Enable captcha on sensitive forms
  1. Toggle the captcha options needed for Admin and public auth forms.
  2. Save and test Admin login plus public login/register.
  3. Confirm legitimate users can still pass captcha.
Apply device limits carefully
  1. Read whether device limit/watermark still show Requires activation.
  2. If active, set limits and communicate to instructors/students before enforcing.
  3. Use reset login count only when intentionally clearing sessions/counts.

Result states

  • Success: Security options save, the configured Admin URL works, and captcha/device rules behave as intended.
  • Pending: Requires activation still showing on device limit/watermark, or DNS/proxy not yet updated for a new admin path.
  • Denied: Missing security settings permission, or activation missing for gated security features.
  • Error: Admin URL change without bookmarking locks staff out; recover via database/settings with hosting access and rotate the path.

Operational notes

  • Never document a fixed admin path deep link; always refer to the configured Admin URL.