Skip to content

OpenVPN. Managing users

This article covers operations on the VPN user list: how to create another user, edit them, temporarily disable, revoke and reissue a certificate, and delete an account. The minimum "install the module and connect the first device" scenario is described in OpenVPN quick start; here we go into more detail.

The user list

The list opens by default on the OpenVPN module page. For each user, the row shows the username (copyable to the clipboard), the comment, and the email if they are filled in. The right side of the row contains the enable toggle and action icons — each action is described below.

Above the list there is the "Users" title, the total user count, and the "Create user" button.

OpenVPN module user list with two entries (alice and bob) and the “Create user” button

When there are no users yet

Right after the module is installed, the list is empty: the panel shows the "No users created yet" title and an explanation that you need to create at least one user to connect to the VPN. Click "Create user" — the next steps are described below.

Creating a user

  1. Click "Create user" in the top-right corner of the list.
  2. Fill in the fields:
    • "Username" — optional. From 2 to 32 characters: Latin letters, digits, and hyphens. If left empty, the panel generates the name itself. If you enter a name already taken by another user, the panel highlights the error under the field.
    • "Email" — optional, must be a valid address if filled in. Used only to email the .ovpn file.
    • "Comment" — an optional label of up to 64 characters.
    • "User language" — language of the email with the configuration. Defaults to English.
    • "Enabled" — by default the user is active right away. To set them up in reserve, turn the toggle off: the account is created without a working certificate.
  3. Click "Create".

The "Create" button is active as long as there are no validation errors in the form.

⚠️ ISP restrictions

Traffic encryption makes a VPN a reliable way to protect a connection, but in some countries and regions internet providers actively interfere with VPN protocols. Because of this, full availability of the service cannot be guaranteed — regardless of the connection type. If one protocol does not work for you, try another VPN module available in the panel. If none of them work on your network, contact support and we will issue a refund for the license.

Editing a user

In the user row, click the "Edit" icon. In the "Edit user" dialog you can change the email, the comment, the "User language", and the "Enabled" toggle. The username in this dialog is read-only — an existing user cannot be renamed.

The "Save" button is active only when something in the form has actually changed compared to the current state. To clear the email or the comment, leave the field empty and save: the panel will wipe the value on the server.

OpenVPN edit-user dialog with the “User language” dropdown set to “English”

Enabling and disabling a user

Each user row has a toggle: a single click enables or disables the account without opening a dialog. A disabled user stays in the list, but no one can connect to the VPN with their certificate — the certificate is added to the revocation list.

⚠️ Re-enabling reissues the certificate

When a user is enabled, a certificate is issued for them. If the user already had a certificate that was revoked (by disabling or deleting), the new certificate is different: the old .ovpn file saved in the client app stops working. Use "Settings" to download a fresh .ovpn and re-import it into the user's app. The panel reminds you of this with a toast right after enabling.

After any "Enabled" toggle — whether from the list or in the edit dialog — the changes require a restart of the OpenVPN service to take effect. See more in the Restart reminder section of the module-management article.

Getting the configuration file

In the user row, click the "Settings" icon. The "Connection settings" dialog lets you download the .ovpn file — a single file with embedded PEM certificates and keys; the file name matches the username. Connecting to OpenVPN is done by importing this file into the client app.

From the same dialog the file can be emailed to the user — the "Send to email" button. The button is disabled if SMTP is not configured in the panel or if the user has no email address. The same action is available straight from the user row — the "Send VPN configuration via email" icon works without opening the settings dialog.

ℹ️ When the file did not generate

If the file cannot be obtained for some reason (for example, the OpenVPN service was off when the dialog was opened), the panel reports that the configuration is unavailable. Close the dialog, make sure the service is running, and open "Settings" again.

Deleting a user

In the user row, click the "Delete" icon (red). The panel asks you to confirm the deletion and warns that the associated certificate will be revoked.

‼️ Deleting a user is irreversible

Right after confirmation, the account is deleted, and its certificate is added to the revocation list. The .ovpn file imported into the client app stops working. The user cannot be restored "as it was" — even if you create a new one with the same name, the certificate will be different, and the client will have to import a new .ovpn.

BeAdmin © 2025. All rights reserved.