What customers find there
The account area answers at /my-account by default (the platform team can change the prefix for a site). It brings together screens from several modules:
- the account home;
- addresses, with pages to add, edit and delete them;
- orders and quotes, each a list and a page per record;
- the wishlist;
- linked accounts and passkeys, the ways they sign in;
- authorised applications, the outside applications they have allowed to act for them;
- current activity, every place they are signed in, with a way to sign each one out.
The area has no records of its own to manage in the admin, and no menu of its own: the links between these screens, and which ones a site offers, are part of the site's templates.
Signed in, and only their own
Every page in the area requires sign-in. A signed-out visitor is sent to the sign-in page and back to the page they asked for afterwards. Each customer sees only their own orders, quotes and addresses.
Members-only pages
A developer can add a page to the area with a single template file: no page record, no route and no admin setting. Such a page is closed to signed-out visitors and open to every signed-in member; if only some members may see it, the template has to decide.
Files in the file manager are public by design: anyone with a file's address can download it, signed in or not. A members-only page can list files, but it does not make them private.
Sessions and applications
Current activity answers "am I still signed in on the library computer?" without a support call: each sign-in shows its browser and address, and the customer can end any of them. Changing the password also ends every other session. Authorised applications matters only if outside applications sign members in through the site; see OAuth and connected applications.
Developers: The member area in the members guide.