Every shopper who registers on your store gets a customer account. You manage all of these from the Django admin, under Accounts › Users. This guide covers what you can see and do there.
Email-only login
Your store does not use usernames. A customer's email address is their login, and it must be unique — two accounts can never share the same email. When you look at a user in the admin, the email field is the account's identity. There is no separate username to set or change.
Finding a customer
Open Accounts › Users in the admin. The list shows each customer's email, first name, staff status, active status, and the date they joined. You can search by email or first name using the search box at the top, and filter the list down by staff status, active status, or join date using the filters on the right.
What the verified flag means
Each account has an is verified checkbox. A verified customer is one who has clicked the confirmation link in the email they received when they signed up. Until they do, they see a reminder on their dashboard asking them to verify, and some features stay limited.
In most cases you should leave this flag alone and let customers verify themselves by email. Only tick it manually if you have confirmed a customer's identity another way and want to lift the reminder for them.
Activating or deactivating an account
The is active checkbox controls whether a customer can log in at all. Leave it ticked for normal customers. If you need to block someone — for example, a problem account — untick is active and save. They will no longer be able to log in, but their order history and records stay intact. Tick it again to restore access.
Deactivating is almost always better than deleting, because it is reversible and preserves the customer's history.
Resending a verification email
If a customer says they never received their verification email, first check that your store's email is set up correctly (see Account emails and deliverability). The customer can also trigger a fresh verification email themselves by logging in and following the reminder on their dashboard, or by attempting to log in again.
Staff and superuser accounts
Two further checkboxes, is staff and is superuser, control admin access rather than shopping. Leave both unticked for ordinary customers. Only your own administrative accounts should have these enabled. Never grant them to a regular shopper.
Deleting an account
Customers can permanently delete their own account from their dashboard. You can also delete an account from the admin, but this is permanent and removes the customer's records. Prefer deactivating over deleting unless you specifically need the data gone.