# 注册、登录与账户安全手册

从邮箱验证到密码找回，按步骤完成账户设置。普通用户与管理员使用不同的安全流程。

请先查看用户中心的开放状态。显示“注册暂未开放”时，请先浏览免费模板；本手册说明开放后的流程，不代表注册或 MCP 已开放。

## 01 / 开始前准备

1. 准备一个能正常收信的邮箱和常用浏览器；无需 ChatGPT、Google 或微软账户。

2. 设置独立的网站密码，长度为 15–128 个字符。请勿复用企业邮箱密码，建议使用密码管理器生成并保存。

3. 阅读隐私与数据说明。免费公开模板无需注册；账户用于保存本人资料、收藏、草稿与需求记录。

## 02 / 创建与验证账户

1. 从本站“用户中心”进入注册页，填写昵称、邮箱和网站密码，阅读并确认资料处理说明后提交。

2. 查看该邮箱的收件箱及垃圾邮件。系统邮件由 notifications@wanyouzhiliu.com 发出；发件人名称不能单独证明邮件可信，请核对链接域名。

3. 验证链接有效期为 30 分钟。打开邮件中的验证链接；若多次申请，请使用最新邮件。不要将链接转发给他人。

4. 完成邮箱验证后，返回用户中心，用邮箱与网站密码登录。邮箱验证不会自动完成登录；普通用户不需要安装验证器。

## 03 / 忘记密码

1. 在登录页选择“找回密码”，填写注册邮箱。出于隐私保护，页面不会透露该地址是否已注册。

2. 收到重置邮件后，在 30 分钟内打开链接，设置新的 15–128 字符网站密码，然后重新登录。

3. 密码重置完成后，已有会话会被撤销。已绑定的管理员 MFA 仍需验证；重置密码不能跳过 MFA。没有申请重置时，可忽略邮件，不要点击或转发链接。

## 04 / 管理员专用：验证器

1. 这一节仅适用于承担管理职责的账户。普通注册、浏览和模板下载不要求安装验证器。管理员在首次绑定、后续登录或敏感管理操作时按提示验证。

2. 使用 Microsoft Authenticator 等支持时间型 TOTP 的验证器。添加时选择“其他账户（Google、Facebook 等）”，再选择手动输入；不要选工作或学校账户。

3. 正确页面包含“账户名称”和“密钥”。名称用于辨认账户；密钥填写本次设置界面提供的设置密钥。不要填写整段 otpauth 链接、恢复码或手机显示的六位验证码。

4. 添加后，手机会生成每 30 秒更新的六位数字；把这组六位数字输入网站或管理员向导的验证码栏。开启手机自动日期与时间；失败后等待下一组数字，仍失败则停止重复尝试并联系支持。

5. 离线保存本次生成的 8 个恢复码，每个只能使用一次。重新设置时使用最新密钥和最新恢复码；若密钥或恢复码被截图分享，应通过受控流程重新设置。任何客服都不应要求你提供这些内容。

## 05 / 常见问题与求助

1. 未收到邮件：检查邮箱拼写、垃圾邮件与收件规则；稍后从登录页重新发送。短时间内重复申请可能触发限流，请勿连续点击。

2. 链接过期或无效：重新申请并使用最新邮件，完整复制链接；不要把带验证参数的链接提交到工单或搜索引擎。

3. 管理员终端断开：停止输入，按专用管理员说明恢复向导。看到 ubuntu@…$ 等命令行提示时，不要把密码、验证码或验证链接当作命令执行。普通用户使用网页流程。

4. 仍无法完成：通过咨询反馈工单或 contact@wanyouzhiliu.com 提供操作步骤、时间、浏览器版本和去除敏感内容后的错误文字。请勿提交密码、验证码、密钥、恢复码或完整验证链接。

## 06 / 注册与 MCP 授权分开

1. 注册不会自动授予任何客户端访问你的资料，也不代表已获得产品内测或上传资格。

2. MCP 开放后，仍需使用受支持且已登记的客户端，并逐项确认所申请权限。只授权确有需要的草稿访问；可在个人空间撤销授权。

3. 不要把第三方 API 密钥、账号密码或他人隐私放进模板、评论、配置草稿或工单。

在线版本: https://wanyouzhiliu.com/guides/account-registration/

---

# Registration, Sign-in & Account Security Guide

Follow the steps for email verification, sign-in and password recovery. Standard users and administrators have different security requirements.

Check availability in the Account page first. If registration is closed, browse the free templates for now. This guide describes the process once available; it does not announce the launch of registration or MCP.

## 01 / Before you begin

1. Have an email address that can receive messages and a current browser. No ChatGPT, Google or Microsoft account is required.

2. Choose a separate website password of 15–128 characters. Do not reuse your email password. A password manager can generate and store a unique password.

3. Read the privacy and data notice. Public templates are available without registration; accounts hold your own profile, favorites, drafts and requests.

## 02 / Create and verify your account

1. Open registration from the Account page. Enter your display name, email and website password, then review and confirm the data notice before submitting.

2. Check your inbox and spam folder. System messages are sent from notifications@wanyouzhiliu.com. A sender name alone does not establish authenticity; check the link domain too.

3. Verification links expire after 30 minutes. Open the verification link in the email. If you requested more than one message, use the latest one. Do not forward the link.

4. After verifying your email, return to Account and sign in with your email and website password. Verification does not sign you in automatically. Standard users do not need an authenticator app.

## 03 / Reset a forgotten password

1. Choose Forgot password on the sign-in page and enter your registered email. To protect privacy, the page does not disclose whether an address is registered.

2. Open the reset email within 30 minutes, choose a new website password of 15–128 characters, and sign in again.

3. A completed password reset revokes existing sessions. Administrators with MFA enrolled must still verify it; password recovery does not bypass MFA. Ignore an unrequested reset email and do not open or forward its link.

## 04 / Administrators only: authenticator setup

1. This section is for accounts with administrative responsibilities. Standard registration, browsing and template downloads do not require an authenticator. Administrators verify when first enrolling, signing in or performing sensitive operations, as prompted.

2. Use Microsoft Authenticator or another app supporting time-based TOTP. Select Other account (Google, Facebook, etc.), then manual entry. Do not choose a work or school account.

3. The correct screen has Account name and Secret key fields. The name is a label; enter the setup key from your current setup screen in Secret key. Do not enter the full otpauth link, a recovery code or the six-digit code generated by the app.

4. After setup, the app generates a six-digit code that changes every 30 seconds. Enter it in the website or administrator wizard. Enable automatic date and time on your phone. Wait for the next code after a failed attempt; stop repeated attempts and contact support if it still fails.

5. Keep the current set of 8 recovery codes offline. Each code can be used once. Use the latest key and codes after repeating setup. If you shared a screenshot containing them, arrange a controlled reset. Support staff should never ask you to disclose them.

## 05 / Troubleshooting and support

1. No email: check the address, spam folder and inbox rules. Wait before resending from the sign-in page. Repeated requests may be rate-limited; avoid clicking continuously.

2. Expired or invalid link: request another message and use the latest complete link. Do not submit links containing verification parameters to a ticket or search engine.

3. Administrator terminal disconnected: stop typing and follow the private administrator instructions to resume. At a shell prompt such as ubuntu@…$, never enter a password, code or verification link as a command. Standard users use the website.

4. Still stuck: submit a support ticket or email contact@wanyouzhiliu.com with the steps, time, browser version and sanitized error text. Exclude passwords, verification codes, secret keys, recovery codes and complete verification links.

## 06 / Registration and MCP consent are separate

1. Registration does not grant a client access to your data or automatically qualify you for a product beta or uploads.

2. When MCP becomes available, use a supported, registered client and review each permission requested. Grant only the draft access you need. Access can be revoked from your personal space.

3. Keep third-party API keys, passwords and other people’s private information out of templates, comments, configuration drafts and support tickets.

Online guide: https://universalintelligence.cn/en/guides/account-registration/