Accounts

Create and manage profiles. Each profile has its own private watchlist over the same shared security data.
Create account
New accounts must set their own password on first login.
UsernameEmailAdminLast loginActions
Legal documents
Publishing a new version immediately requires every account to re-accept before they can use the site (Terms) or add a new ticker (Investment Disclaimer) again.
HTML is allowed (renders in the acceptance modal).
System settings
When off, the "Create an account" link is hidden on the login page and the signup endpoint itself refuses new accounts.
An email is sent once an account's consecutive failed logins reach this number. Account lockout itself (15 min after 5 failures) is separate and not affected by this setting.
Security / audit log
Every admin action (create/delete/promote, legal publish, settings change) and security event (logins, failed attempts, signups) - searchable, not a background script writing to a file.
Time (ET)CategoryActionActorTargetDetailIPDevice ID