Skip to main content
Your profile page at /profile lets you update your personal information, change your password, and review your account role.

Updating your profile

1

Open your profile

Click your username or avatar in the app header, then select Profile — or navigate directly to /profile.
2

Edit your details

Update your Username and/or Email in the profile form.
3

Save changes

Click Save changes. The app confirms success with a toast notification and refreshes your session data.

Changing your password

You must know your current password to set a new one.
1

Scroll to the password section

On the profile page, find the Change password form below your profile details.
2

Enter your current password

Type your existing password in the Current password field (currentPassword).
3

Enter a new password

Type your desired password in the New password field (newPassword).
4

Confirm your new password

Re-enter the same password in the Confirm new password field (confirmPassword). Both fields must match.
5

Submit

Click Update password. If successful, you will see a confirmation message. Your existing session remains active.

Dark mode toggle

A theme toggle is available in the app header. Click it at any time to switch between light and dark mode. Your preference is applied instantly across the entire application.

Your role

Every KilomeTracker account is assigned a role that controls what you can see and do. Your current role is displayed on your profile page.
RoleCapabilities
readView vehicles, routes, refuels, maintenance, and expenses. Cannot create, edit, or delete any records.
writeFull access to add and manage vehicles, routes, refuels, maintenance, and expenses.
adminEverything in write, plus access to the user management panel to manage other accounts.
You cannot change your own role. Contact an administrator if you need a different level of access.

Account security

KilomeTracker stores your JWT authentication token in an HTTP-only cookie. This means the token is never accessible to browser JavaScript, protecting your session from cross-site scripting (XSS) attacks. You do not need to manage tokens manually.

Build docs developers (and LLMs) love