Account Signup and Password Reset
Create new accounts, invite users by email, and restore access securely
The auth_signup module provides new-account registration and password reset by email in Odoo.
It supports both B2C public signup and B2B invitation-only onboarding models.
Key features
Key points
• Register new accounts for external users.
• Reset passwords by email with time-limited links.
• Invite users by email to complete account activation.
• Track user states such as Invited and Confirmed.
• Control validity periods for signup and password-reset tokens.
Register a new account
Steps
1. Open the login page.
2. Click Sign up if public registration is enabled.
3. Enter the name, email, and password.
4. Submit the form to create the account, or complete activation from the invitation link.
Two registration modes
| Mode | How it works | Best for |
|---|---|---|
| B2C | Users click Sign up and create an account immediately | Public-facing websites for customers or external users. |
| B2B | An administrator creates the user and sends an invitation email | Enterprise environments with controlled onboarding. |
Reset a password
Steps
1. On the login page, click Reset Password.
2. Enter the email or login.
3. Open the email sent by Odoo.
4. Click the reset link while it is still valid.
5. Enter the new password and click Change Password.
6. Sign in again with the new password.
Invite users (administrator)
Steps
1. Go to Settings → Users & Companies → Users.
2. Click Create and enter the new user information.
3. Save the user, then click Send an Invitation Email.
4. The user receives an email and completes account activation from the provided link.
5. If activation is not completed, the invitation email can be resent.
Important configuration
| Fields | Trường dữ liệu | Description |
|---|---|---|
| Invitation Scope | Phạm vi lời mời | Choose B2B for invitation-only registration or B2C for public signup. |
| auth_signup.signup.validity.hours | Thời hạn token đăng ký | Default is 144 hours, or 6 days. |
| auth_signup.reset_password.validity.hours | Thời hạn token reset mật khẩu | Default is 4 hours. |
| base.template_portal_user_id | User mẫu portal | Template user used to copy permissions for portal accounts. |
User states
Common statuses
| Status | Meaning |
|---|---|
| Invited / New | The user was created but has not signed in or finished activation yet. |
| Confirmed / Active | The user has signed in at least once and the account is active. |
Security notes
Key points
• Signup and password-reset tokens both expire and are invalidated after use.
• Because tokens are delivered by email, the email address must be correct and accessible.
• After the user signs in, some older tokens may be invalidated automatically.
• Pair auth_signup with password policy so newly created accounts do not start with weak passwords.
Troubleshooting
Common issues
| Issue | Cause | Solution |
|---|---|---|
| Email not received | Mail server not configured, wrong email address, or message went to spam | Check SMTP, verify the email address, and inspect the spam folder. |
| Signup link expired | Signup token is older than 6 days or reset token is older than 4 hours | Send a new invitation email or start a new reset flow. |
| Signup is not allowed | The system is running in B2B mode | Ask an administrator to send an invitation. |
| No account found for this login | The email or login does not exist | Check the details again or create a new account. |