--- id: multi-user/no-way-to-create-a-second-account title: "No way to create a second account" theme: multi-user status: done created: 2026-08-11 date_source: stated order: 7 --- **No way to create a second account.** Fixed 2026-08-11 on `sidecar-app-store`: `POST /api/users` (`api/users/create-user.ts`, owner-gated) plus an Add-account form in Settings → User management. Created accounts are `status: 'Active'` — the column defaults to `'Unverified'` and `signin.ts` refuses anything else with a bare UNAUTHORIZED, which is the trap the hand-INSERT route fell into. The owner sets the password and reads it out; `passwordChangedAt` stays null. Directories come from the shared `provisionUserDirs`/`USER_DIRS` in `data-path.ts`, which `scripts/provision-user-dirs.ts` now imports rather than restating.